Page last updated:

Type

Affected Software

Latest Version

Description

Severity

Date

  • Plugin

    TranslatePress – Multilingual

    <=

    3.3.9

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.



    7.1

    0 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    3.3.9

    Description

    pulse_description

    0 days ago

  • Plugin

    OAuth Single Sign On – SSO (OAuth Client)

    <=

    7.1.4

    Privilege Escalation – A low-privilege user can become an admin and gain full control.

    9.8

    2 days ago

    Type

    Plugin

    9.8

    Affected Software

    Latest Version

    <=

    7.1.4

    Description

    pulse_description

    2 days ago

  • Plugin

    wpDiscuz

    <=

    7.6.74

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.

    7.1

    4 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    7.6.74

    Description

    pulse_description

    4 days ago

  • Plugin

    WPForms Lite

    <=

    2.0.3.1

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.

    7.1

    4 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    2.0.3.1

    Description

    pulse_description

    4 days ago

  • Plugin

    Simple Cloudflare Turnstile

    <=

    1.44.2

    Broken Authentication – Attackers can bypass the login system or log in as other users without their password.

    5.3

    4 days ago

    Type

    Plugin

    5.3

    Affected Software

    Latest Version

    <=

    1.44.2

    Description

    pulse_description

    4 days ago

  • Plugin

    Enable Media Replace

    <=

    4.2.3

    Broken Access Control – Users can access pages or perform actions they shouldn’t be allowed to, like viewing other people’s data.



    4.3

    9 days ago

    Type

    Plugin

    4.3

    Affected Software

    Latest Version

    <=

    4.2.3

    Description

    pulse_description

    9 days ago

  • Plugin

    GoSMTP

    <=

    1.2.5

    Privilege Escalation – A low-privilege user can become an admin and gain full control.

    7.2

    9 days ago

    Type

    Plugin

    7.2

    Affected Software

    Latest Version

    <=

    1.2.5

    Description

    pulse_description

    9 days ago

  • Plugin

    CMB2

    <=

    2.13.5

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.

    7.1

    9 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    2.13.5

    Description

    pulse_description

    9 days ago

  • Plugin

    Meow Lightbox

    <=

    5.6.3

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.



    6.5

    14 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    5.6.3

    Description

    pulse_description

    14 days ago

  • Plugin

    Relevanssi

    <=

    4.28.5

    PHP Object Injection – Attackers can manipulate how the site processes data to run harmful actions on the server.

    7.2

    14 days ago

    Type

    Plugin

    7.2

    Affected Software

    Latest Version

    <=

    4.28.5

    Description

    pulse_description

    14 days ago

  • Plugin

    Elementor

    <=

    4.3.5

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.

    6.8

    16 days ago

    Type

    Plugin

    6.8

    Affected Software

    Latest Version

    <=

    4.3.5

    Description

    pulse_description

    16 days ago

  • Plugin

    Meta Box

    <=

    5.15.3

    Broken Access Control – Users can access pages or perform actions they shouldn’t be allowed to, like viewing other people’s data.

    6.5

    17 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    5.15.3

    Description

    pulse_description

    17 days ago

  • Plugin

    The Events Calendar

    <=

    6.18.2

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.



    6.5

    21 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    6.18.2

    Description

    pulse_description

    21 days ago

  • Plugin

    Contact Form CFDB7

    <=

    1.4.2

    Arbitrary File Deletion – Attackers can delete important files and break the website.

    5.3

    24 days ago

    Type

    Plugin

    5.3

    Affected Software

    Latest Version

    <=

    1.4.2

    Description

    pulse_description

    24 days ago

  • Plugin

    Broken Link Checker

    <=

    2.4.15

    Content Injection – Attackers can add unwanted content to pages (ads, scams, or malware links).

    6.5

    24 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    2.4.15

    Description

    pulse_description

    24 days ago

  • Plugin

    JetElements For Elementor

    <=

    2.9.2.4

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.



    6.5

    25 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    2.9.2.4

    Description

    pulse_description

    25 days ago

  • Plugin

    JetEngine

    <=

    3.8.16.1

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.

    25 days ago

    Type

    Plugin

    Affected Software

    Latest Version

    <=

    3.8.16.1

    Description

    pulse_description

    25 days ago

  • Plugin

    Rank Math SEO

    <=

    1.0.280

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.



    3.5

    25 days ago

    Type

    Plugin

    3.5

    Affected Software

    Latest Version

    <=

    1.0.280

    Description

    pulse_description

    25 days ago

  • Plugin

    Premium Addons for Elementor

    <=

    4.11.111

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.

    6.5

    25 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    4.11.111

    Description

    pulse_description

    25 days ago

  • Plugin

    Element Pack Lite – Addons for Elementor

    <=

    8.8.9

    Cross Site Scripting (XSS) – Attackers can inject malicious scripts into the site that steal visitor data or hijack their accounts.

    6.5

    25 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    8.8.9

    Description

    pulse_description

    25 days ago