Page last updated:

Type

Affected Software

Latest Version

Description

Severity

Date

  • Plugin

    WooCommerce

    <=

    11.0

    SQL Injection – This could allow a malicious actor to directly interact with your database, including but not limited to stealing information.

    7.6

    0 days ago

    Type

    Plugin

    7.6

    Affected Software

    Latest Version

    <=

    11.0

    Description

    pulse_description

    0 days ago

  • Plugin

    WP Recipe Maker

    <=

    10.8.1

    Broken Access Control – A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.

    4.3

    0 days ago

    Type

    Plugin

    4.3

    Affected Software

    Latest Version

    <=

    10.8.1

    Description

    pulse_description

    0 days ago

  • Plugin

    Simple CAPTCHA with Cloudflare Turnstile

    <=

    1.42.3

    Bypass Vulnerability – A bypass vulnerability could allow a malicious actor to bypass certain restrictions in the code.

    5.6

    0 days ago

    Type

    Plugin

    5.6

    Affected Software

    Latest Version

    <=

    1.42.3

    Description

    pulse_description

    0 days ago

  • Plugin

    Gravity Forms

    <=

    3.1.1

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. 



    7.1

    4 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    3.1.1

    Description

    pulse_description

    4 days ago

  • Plugin

    3D FlipBook : DearFlip Lite

    <=

    2.4.37

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. 



    6.5

    4 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    2.4.37

    Description

    pulse_description

    4 days ago

  • Plugin

    WPMU DEV Dashboard

    <=

    5.0.2

    Broken Authentication – This can be abused by a malicious actor to perform action which normally should only be able to be executed by higher privileged users. These actions might allow the malicious actor to gain admin access to the website.

    9.8

    11 days ago

    Type

    Plugin

    9.8

    Affected Software

    Latest Version

    <=

    5.0.2

    Description

    pulse_description

    11 days ago

  • Plugin

    WP Rocket

    <=

    3.23.3.3

    Sensitive Data Exposure – This could allow a malicious actor to view sensitive information that is normally not available to regular users. This can be used to exploit other weaknesses in the system.



    7.5

    11 days ago

    Type

    Plugin

    7.5

    Affected Software

    Latest Version

    <=

    3.23.3.3

    Description

    pulse_description

    11 days ago

  • Plugin

    ManageWP Worker

    <=

    4.9.37

    Broken Authentication – This can be abused by a malicious actor to perform action which normally should only be able to be executed by higher privileged users. These actions might allow the malicious actor to gain admin access to the website.

    9.8

    14 days ago

    Type

    Plugin

    9.8

    Affected Software

    Latest Version

    <=

    4.9.37

    Description

    pulse_description

    14 days ago

  • Plugin

    All-in-One WP Migration

    <=

    7.110

    Remote Code Execution (RCE) – This could allow a malicious actor to execute commands on the target website. This can be used to gain backdoor access to then take full control of the website.



    8.8

    14 days ago

    Type

    Plugin

    8.8

    Affected Software

    Latest Version

    <=

    7.110

    Description

    pulse_description

    14 days ago

  • Plugin

    Limit Login Attempts Reloaded

    <=

    3.3.5

    Bypass Vulnerability – A bypass vulnerability could allow a malicious actor to bypass certain restrictions in the code.



    3.7

    14 days ago

    Type

    Plugin

    3.7

    Affected Software

    Latest Version

    <=

    3.3.5

    Description

    pulse_description

    14 days ago

  • Plugin

    WP Go Maps (formerly WP Google Maps)

    <=

    10.1.03

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. 



    7.1

    14 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    10.1.03

    Description

    pulse_description

    14 days ago

  • Plugin

    Event Tickets

    <=

    5.29.3

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. 

    7.1

    14 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    5.29.3

    Description

    pulse_description

    14 days ago

  • Plugin

    Link Whisper Free

    <=

    0.9.7

    SQL Injection – This could allow a malicious actor to directly interact with your database, including but not limited to stealing information.



    8.5

    15 days ago

    Type

    Plugin

    8.5

    Affected Software

    Latest Version

    <=

    0.9.7

    Description

    pulse_description

    15 days ago

  • Plugin

    WP Maps

    <=

    4.9.8

    Broken Access Control – A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.



    5.4

    18 days ago

    Type

    Plugin

    5.4

    Affected Software

    Latest Version

    <=

    4.9.8

    Description

    pulse_description

    18 days ago

  • Plugin

    SG AI Studio

    <=

    1.2.8

    A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.

    4.3

    18 days ago

    Type

    Plugin

    4.3

    Affected Software

    Latest Version

    <=

    1.2.8

    Description

    pulse_description

    18 days ago

  • Plugin

    ECS – Ele Custom Skin for Elementor

    <=

    4.3.11

    Sensitive Data Exposure – This could allow a malicious actor to view sensitive information that is normally not available to regular users. This can be used to exploit other weaknesses in the system.



    5.3

    19 days ago

    Type

    Plugin

    5.3

    Affected Software

    Latest Version

    <=

    4.3.11

    Description

    pulse_description

    19 days ago

  • Plugin

    SAML Single Sign On

    <=

    5.4.7

    Privilege Escalation – This could allow a malicious actor to escalate their low privileged account to something with higher privileges. After this they could take full control of the website if high privileges are gained.



    8.8

    19 days ago

    Type

    Plugin

    8.8

    Affected Software

    Latest Version

    <=

    5.4.7

    Description

    pulse_description

    19 days ago

  • Plugin

    TranslatePress – Multilingual

    <=

    3.3.3

    TranslatePress – Multilingual – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. 

    7.1

    19 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    3.3.3

    Description

    pulse_description

    19 days ago

  • Plugin

    wpForo

    <=

    3.1.5

    Broken Access Control – A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.



    4.3

    19 days ago

    Type

    Plugin

    4.3

    Affected Software

    Latest Version

    <=

    3.1.5

    Description

    pulse_description

    19 days ago

  • Plugin

    EWWW Image Optimizer

    <=

    8.7.5

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    6.5

    19 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    8.7.5

    Description

    pulse_description

    19 days ago