CROWD-SOURCED
VULNERABILITIES DATABASE

Vulnerabilities Crowdsourced from WordPress security researchers and the amazing public databases of –

Accessibility by AllAccessible (Arbitrary Option Update) < 1.3.5
3 Dec 2024
PROTECTED
TI WooCommerce Wishlist (Missing Authorization to Unauthenticated Plugin Setup Wizard Access) < 2.9.2
3 Dec 2024
PROTECTED
Registration Forms (Authentication Bypass) < 1.8
3 Dec 2024
PROTECTED
Classic Addons - WPBakery Page Builder (Arbitrary Local PHP File Inclusion) < 3.1
3 Dec 2024
PROTECTED
Advanced File Manager (Arbitrary File Upload) < 5.2.11
2 Dec 2024
PROTECTED
Tumult Hype Animations (Arbitrary File Upload) < 1.9.16
27 Nov 2024
PROTECTED
WP JobSearch (Privilege Escalation) < 2.6.8
27 Nov 2024
PROTECTED
Contest Gallery (Privilege Escalation) < 24.0.8
27 Nov 2024
PROTECTED
File Manager Pro - Filester (Arbitrary File Upload) < 1.8.5
27 Nov 2024
PROTECTED
File Manager Pro - Filester (Local JavaScript File Inclusion) < 1.8.6
27 Nov 2024
PROTECTED
Widget Options (Remote Code Execution) < 4.0.8
27 Nov 2024
PROTECTED
Total Upkeep (Remote Code Execution) < 1.16.7
26 Nov 2024
PROTECTED
Booking & Appointment Plugin for WooCommerce (Arbitrary Option Update) < 6.10.0
25 Nov 2024
PROTECTED
Spam protection, Anti-Spam, FireWall by CleanTalk (Authorization Bypass) < 6.45
25 Nov 2024
PROTECTED
AppPresser - Mobile App Framework (Privilege Escalation) < 4.4.7
25 Nov 2024
PROTECTED
Request a Quote for WooCommerce and Elementor (Arbitrary Shortcode Execution via fire_contact_form) < 1.5
22 Nov 2024
PROTECTED
WP-Orphanage Extended (Cross-Site Request Forgery) < 1.3
22 Nov 2024
PROTECTED
School Management (Arbitrary File Upload) < 92.0.0
22 Nov 2024
PROTECTED
FluentSMTP (Unauthenticated PHP Object Injection) < 2.2.83
22 Nov 2024
PROTECTED
WPGYM (Arbitrary File Upload) < 67.2.0
22 Nov 2024
PROTECTED