AnnunciFunebri Impresa <= 4.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Deletion

pcantoni AnnunciFunebri Impresa

Postem Ipsum <= 3.0.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation in postem_ipsum_generate_users

franciscopalacios Postem Ipsum

Userback <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Plugin's Configuration Exposure

userback Userback

Quick Testimonials <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

themeregion Quick Testimonials

Eyewear prescription form <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Product Creation

dugudlabs Eyewear prescription form

a3 Lazy Load <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

a3rev a3 Lazy Load

Popover Windows <= 1.2 - Missing Authorization to Authenticated (Subscriber+) Popover Configuration Update via AJAX Actions

melodicmedia Popover Windows

Emplibot – AI Content Writer with Keyword Research, Infographics, and Linking | SEO Optimized | Fully Automated <= 1.0.9 - Authenticated (Admin+) Server-Side Request Forgery

emplibot Emplibot – AI Content Writer with Keyword Research, Infographics, and Linking | SEO Optimized | Fully Automated

Image Slider by Ays- Responsive Slider and Carousel <= 2.7.0 - Cross-Site Request Forgery to Arbitrary Slider Deletion

ays-pro Image Slider by Ays- Responsive Slider and Carousel

Design Import/Export <= 2.2 - Authenticated (Administrator+) SQL Injection via XML File Import

uxl Design Import/Export – Styles, Templates, Template Parts and Patterns

WP Directory Kit <= 1.4.7 - Unauthenticated SQL Injection

listingthemes WP Directory Kit

HT Slider for Elementor <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

htplugins HT Slider For Elementor

Custom Post Type UI <= 1.18.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'label' Import Parameter

webdevstudios Custom Post Type UI

GenerateBlocks <= 2.1.2 - Authenticated (Contributor+) Information Exposure via Metadata

edge22 GenerateBlocks

HAPPY – Helpdesk Support Ticket System <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Reply

villatheme HAPPY – Helpdesk Support Ticket System

404 Solution <= 3.1.0 - Authenticated (Admin+) SQL Injection via 'filterText' Parameter

aaron13100 404 Solution

Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.3 - Missing Authorization to Authenticated (Subscriber+) Tracking Opt-In/Opt-Out Modification

emarket-design Employee Spotlight – Team Member Showcase & Meet the Team Plugin

OpenPLC_V3 Cross-Site Request Forgery

OpenPLC_V3 OpenPLC_V3

itsourcecode COVID Tracking System page sql injection

itsourcecode COVID Tracking System angeljudesuarez covid_tracking_system

itsourcecode COVID Tracking System Admin Login login.php sql injection

itsourcecode COVID Tracking System angeljudesuarez covid_tracking_system