Page last updated:

Type

Affected Software

Latest Version

Description

Severity

Date

  • Plugin

    Simple History

    <=

    5.25.0

    Sensitive Data Exposure – This could allow a malicious actor to view sensitive information that is normally not available to regular users. This can be used to exploit other weaknesses in the system.

    5.3

    3 days ago

    Type

    Plugin

    5.3

    Affected Software

    Latest Version

    <=

    5.25.0

    Description

    pulse_description

    3 days ago

  • Plugin

    Gravity Forms

    <=

    2.9.31

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    7.1

    4 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    2.9.31

    Description

    pulse_description

    4 days ago

  • Plugin

    Kadence Blocks

    <=

    3.6.6

    Broken Access Control – A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.

    7.1

    5 days ago

    Type

    Plugin

    7.1

    Affected Software

    Latest Version

    <=

    3.6.6

    Description

    pulse_description

    5 days ago

  • Plugin

    WP Rocket

    <=

    3.21.0.1

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    5.9

    5 days ago

    Type

    Plugin

    5.9

    Affected Software

    Latest Version

    <=

    3.21.0.1

    Description

    pulse_description

    5 days ago

  • Plugin

    ElementsKit Lite

    <=

    3.9

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    6.5

    5 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    3.9

    Description

    pulse_description

    5 days ago

  • Plugin

    Post Meta Data Manager

    <=

    1.5

    Privilege Escalation – This could allow a malicious actor to escalate their low privileged account to something with higher privileges. After this they could take full control of the website if high privileges are gained.

    7.2

    5 days ago

    Type

    Plugin

    7.2

    Affected Software

    Latest Version

    <=

    1.5

    Description

    pulse_description

    5 days ago

  • Plugin

    Yoast SEO

    <=

    7.3

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    6.5

    5 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    7.3

    Description

    pulse_description

    5 days ago

  • Plugin

    Enable Media Replace

    <=

    4.1.8

    Broken Access Control – A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.

    5.4

    5 days ago

    Type

    Plugin

    5.4

    Affected Software

    Latest Version

    <=

    4.1.8

    Description

    pulse_description

    5 days ago

  • Plugin

    Addon Elements for Elementor

    <=

    1.14.5

    Sensitive Data Exposure – This could allow a malicious actor to view sensitive information that is normally not available to regular users. This can be used to exploit other weaknesses in the system.

    6.5

    9 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    1.14.5

    Description

    pulse_description

    9 days ago

  • Plugin

    Ninja Forms

    <=

    3.14.1

    Sensitive Data Exposure – This could allow a malicious actor to view sensitive information that is normally not available to regular users. This can be used to exploit other weaknesses in the system.

    6.5

    11 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    3.14.1

    Description

    pulse_description

    11 days ago

  • Plugin

    Ultimate Member

    <=

    2.11.2

    Privilege Escalation – This could allow a malicious actor to escalate their low privileged account to something with higher privileges. After this they could take full control of the website if high privileges are gained.

    8.0

    11 days ago

    Type

    Plugin

    8.0

    Affected Software

    Latest Version

    <=

    2.11.2

    Description

    pulse_description

    11 days ago

  • Plugin

    Smart Slider 3

    <=

    3.5.1.33

    Arbitrary File Download – This could allow a malicious actor to download any file from your website. This includes but is not limited to files that contain login credentials or backup files.

    6.5

    11 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    3.5.1.33

    Description

    pulse_description

    11 days ago

  • Plugin

    Visual Portfolio, Photo Gallery & Post Grid

    <=

    3.5.1

    Local File Inclusion – This could allow a malicious actor to include local files of the target website and show its output onto the screen. Files which store credentials, such as database credentials, could potentially allow complete database takeover depending on the configuration.

    7.5

    11 days ago

    Type

    Plugin

    7.5

    Affected Software

    Latest Version

    <=

    3.5.1

    Description

    pulse_description

    11 days ago

  • Plugin

    Password Protect WordPress

    <=

    1.9.15

    Broken Access Control – This could allow a malicious actor to perform actions they are not authorized to do, such as accessing or modifying content, by exploiting missing authorization, authentication, or nonce token checks.

    5.4

    18 days ago

    Type

    Plugin

    5.4

    Affected Software

    Latest Version

    <=

    1.9.15

    Description

    pulse_description

    18 days ago

  • Plugin

    Autoptimize

    <=

    3.1.14

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    6.5

    18 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    3.1.14

    Description

    pulse_description

    18 days ago

  • Plugin

    Yoast SEO

    <=

    27.1.1

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    6.5

    18 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    27.1.1

    Description

    pulse_description

    18 days ago

  • Plugin

    EmailKit

    <=

    1.6.3

    Path Traversal – This could allow a malicious actor to access files outside the intended directory, potentially exposing sensitive server files and configuration data on your website.

    4.9

    20 days ago

    Type

    Plugin

    4.9

    Affected Software

    Latest Version

    <=

    1.6.3

    Description

    pulse_description

    20 days ago

  • Plugin

    Code Embed

    <=

    2.5.1

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    6.5

    24 days ago

    Type

    Plugin

    6.5

    Affected Software

    Latest Version

    <=

    2.5.1

    Description

    pulse_description

    24 days ago

  • Plugin

    Post SMTP

    <=

    3.8.0

    Broken Access Control – A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action.

    5.4

    24 days ago

    Type

    Plugin

    5.4

    Affected Software

    Latest Version

    <=

    3.8.0

    Description

    pulse_description

    24 days ago

  • Plugin

    Envira Photo Gallery

    <=

    1.12.3

    Cross Site Scripting (XSS) – This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site.

    5.9

    24 days ago

    Type

    Plugin

    5.9

    Affected Software

    Latest Version

    <=

    1.12.3

    Description

    pulse_description

    24 days ago