Page last updated:

Type

Affected Software

Latest Version

Description

Severity

Date

  • Plugin

    WPBakery Page Builder

    <=

    8.7.3

    Broken Access Control – A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.

    6.5

    101 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    8.7.3

    Description

    pulse_description

    101 days ago

  • Plugin

    Google Analytics for WordPress by MonsterInsights

    <=

    10.1.3

    Broken Access Control – A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.

    7.1

    101 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    10.1.3

    Description

    pulse_description

    101 days ago

  • Plugin

    Avada builder

    <=

    3.15.3

    Arbitrary File Download – This could allow a malicious actor to download any file from your website. This includes but is not limited to files that contain login credentials or backup files.



    6.5

    101 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    3.15.3

    Description

    pulse_description

    101 days ago

  • Plugin

    Envira Gallery 

    <=

    1.12.5

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    5.9

    101 days ago

    Type

    Plugin

    5.9

    Affected Software

    Latest Version

    <=

    1.12.5

    Description

    pulse_description

    101 days ago

  • Plugin

    e2pdf

    <=

    1.32.18

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. 



    6.5

    107 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    1.32.18

    Description

    pulse_description

    107 days ago

  • Plugin

    Betheme Theme

    <=

    28.4.1

    Arbitrary File Deletion – This could allow a malicious actor to delete files from your website. If core files are deleted from your website, it could cause your site to break and stop functioning.



    6.5

    109 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    28.4.1

    Description

    pulse_description

    109 days ago

  • Plugin

    Fluent Forms

    <=

    6.2.2

    Arbitrary File Download – This could allow a malicious actor to download any file from your website. This includes but is not limited to files that contain login credentials or backup files.

    4.9

    109 days ago

    Type

    Plugin

    4.9

    Affected Software

    Latest Version

    <=

    6.2.2

    Description

    pulse_description

    109 days ago

  • Plugin

    Premium Addons for Elementor

    <=

    4.11.75

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. 



    6.5

    110 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    4.11.75

    Description

    pulse_description

    110 days ago

  • Plugin

    Gravity Forms

    <=

    2.10.1

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. 



    7.1

    110 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    2.10.1

    Description

    pulse_description

    110 days ago

  • Plugin

    Elementor 

    <=

    4.0.5

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    6.5

    114 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    4.0.5

    Description

    pulse_description

    114 days ago

  • Plugin

    Image Widget

    <=

    4.4.12

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    5.9

    116 days ago

    Type

    Plugin

    5.9

    Affected Software

    Latest Version

    <=

    4.4.12

    Description

    pulse_description

    116 days ago

  • Plugin

    Complianz

    <=

    7.4.6

    Broken Access Control – A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.


    5.3

    116 days ago

    Type

    Plugin

    5.3

    Affected Software

    Latest Version

    <=

    7.4.6

    Description

    pulse_description

    116 days ago

  • Plugin

    Directorist

    <=

    8.6.6

    Open Redirection – This could allow a malicious actor to redirect users from one site to the other due to the redirect URL not being validated. Users could be tricked into visiting a legitimate site to then be redirected to a malicious site and cause a phishing incident.

    4.7

    119 days ago

    Type

    Plugin

    4.7

    Affected Software

    Latest Version

    <=

    8.6.6

    Description

    pulse_description

    119 days ago

  • Plugin

    Website LLMs.txt

    <=

    8.2.6

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    7.1

    119 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    8.2.6

    Description

    pulse_description

    119 days ago

  • Plugin

    BetterDocs

    <=

    4.3.11

    Missing Authorization – This could allow a malicious actor to perform actions they are not authorized to do by exploiting missing authorization checks, in this case making unauthorized calls to an AI API.

    4.3

    119 days ago

    Type

    Plugin

    4.3

    Affected Software

    Latest Version

    <=

    4.3.11

    Description

    pulse_description

    119 days ago

  • Plugin

    All-in-One WP Migration

    <=

    7.58

    Arbitrary File Deletion – This could allow a malicious actor to delete files from your website. If core files are deleted from your website, it could cause your site to break and stop functioning.

    6.6

    119 days ago

    Type

    Plugin

    6.6

    Affected Software

    Latest Version

    <=

    7.58

    Description

    pulse_description

    119 days ago

  • Plugin

    Google Analytics Dashboard

    <=

    9.1.2

    Broken Access Control – This could allow a malicious actor to perform actions they are not authorized to do, such as accessing or modifying content, by exploiting missing authorization, authentication, or nonce token checks.

    7.2

    119 days ago

    Type

    Plugin

    7.2

    Affected Software

    Latest Version

    <=

    9.1.2

    Description

    pulse_description

    119 days ago

  • Plugin

    Essential Addons for Elementor

    <=

    6.5.13

    Broken Access Control – This could allow a malicious actor to perform actions they are not authorized to do, such as accessing or modifying content, by exploiting missing authorization, authentication, or nonce token checks.

    5.3

    119 days ago

    Type

    Plugin

    5.3

    Affected Software

    Latest Version

    <=

    6.5.13

    Description

    pulse_description

    119 days ago

  • Plugin

    Modula Image Gallery

    <=

    2.14.18

    PHP Object Injection – This could allow a malicious actor to execute code injection, SQL injection, path traversal, denial of service, and more if a proper POP chain is present.

    7.2

    124 days ago

    Type

    Plugin

    7.2

    Affected Software

    Latest Version

    <=

    2.14.18

    Description

    pulse_description

    124 days ago

  • Plugin

    wpDataTables

    <=

    6.5.0.4

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    4.7

    124 days ago

    Type

    Plugin

    4.7

    Affected Software

    Latest Version

    <=

    6.5.0.4

    Description

    pulse_description

    124 days ago