WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability

ramon fincken Auto Prune Posts

WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability

codepeople Appointment Booking Calendar

WordPress Theater for WordPress plugin <= 0.18.8 - Broken Access Control vulnerability

Jeroen Schmit Theater for WordPress

Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability

SMCI SYS-111C-NR

WordPress Content Flipper <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

aumsrini WordPress Content Flipper

WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass

benmoody WP Headless CMS Framework

Angel – Fashion Model Agency WordPress CMS Theme <= 3.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

kayapati Angel – Fashion Model Agency WordPress CMS Theme

Save as PDF Button <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via restpackpdfbutton Shortcode

restpack Save as PDF Button

Convert WebP & AVIF | Quicq | Best image optimizer and compression plugin | Improve your Google Pagespeed <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Afosto Disconnect

sanderkah Convert WebP & AVIF | Quicq | Best image optimizer and compression plugin | Improve your Google Pagespeed

AI Engine <= 3.1.8 - Authenticated (Subscriber+) PHP Object Injection via PHAR Deserialization

tigroumeow AI Engine

Comment Edit Core – Simple Comment Editing <= 3.1.0 - Unauthenticated Sensitive Information Exposure

ronalfy Comment Edit Core – Simple Comment Editing

Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter

ays-pro Poll Maker – Versus Polls, Anonymous Polls, Image Polls

Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposure

ays-pro Survey Maker

LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation

chrisbadgett LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes

SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure

brainstormforce SureForms – Contact Form, Custom Form Builder, Calculator & More

Import any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic

wpallimport Import any XML, CSV or Excel File to WordPress

Survey Maker <= 5.1.9.4 - Missing Authorization Unauthenticated Limited Option Update

ays-pro Survey Maker

Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure

uscnanbu Welcart e-Commerce

Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object Reference

softaculous Page Builder: Pagelayer – Drag and Drop website builder

Data Tables Generator by Supsystic <= 1.10.45 - Authenticated (Admin+) Arbitrary File Deletion

supsysticcom Data Tables Generator by Supsystic