Plugin: Display custom fields in the frontend – Post and User Profile Fields Vulnerability: Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta DisclosurePatched Version: 1.3.0Recommended Action: Update to version 1.3.0, or a newer patched version Plugin: Order Export & Order Import for WooCommerce Vulnerability: Authenticated (Shop Manager+) Arbitrary File Upload via upload_import_filePatched Version: 2.4.4Recommended […]
Plugin: Woocommerce Vietnam Checkout Vulnerability: Authenticated (Admin+) Stored Cross-Site ScriptingPatched Version: 2.0.8Recommended Action: Update to version 2.0.8, or a newer patched version Plugin: Newsletter – Send awesome emails from WordPress Vulnerability: Cross-Site Request ForgeryPatched Version: 8.0.7Recommended Action: Update to version 8.0.7, or a newer patched version Plugin: ARMember – Membership Plugin, Content Restriction, Member Levels,
Plugin: Complianz – GDPR/CCPA Cookie Consent Vulnerability: Authenticated(Administrator+) Stored Cross-site Scripting via settingsPatched Version: 6.5.6Recommended Action: Update to version 6.5.6, or a newer patched version Plugin: WooCommerce Easy Duplicate Product Vulnerability: Missing Authorization via wedp_duplicate_product_actionPatched Version: 0.3.0.8Recommended Action: Update to version 0.3.0.8, or a newer patched version Plugin: WooCommerce Warranty Requests Vulnerability: Missing AuthorizationPatched Version:
Plugin: E2Pdf – Export To Pdf Tool for WordPress Vulnerability: Authenticated (Administrator+) Arbitrary File UploadPatched Version: 1.20.26Recommended Action: Update to version 1.20.26, or a newer patched version Plugin: Image horizontal reel scroll slideshow Vulnerability: Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodePatched Version: 13.4Recommended Action: Update to version 13.4, or a newer patched version Plugin: Simple
Error: cURL error 28: Operation timed out after 5000 milliseconds with 30237810 out of 50741328 bytes received
Plugin: E2Pdf – Export To Pdf Tool for WordPress Vulnerability: Authenticated (Administrator+) Arbitrary File UploadPatched Version: 1.20.26Recommended Action: Update to version 1.20.26, or a newer patched version Plugin: MW WP Form Vulnerability: Improper Limitation of File Name to Unauthenticated Arbitrary File DeletionPatched Version: 5.0.4Recommended Action: Update to version 5.0.4, or a newer patched version Plugin:
Plugin: Backup Migration Vulnerability: Unauthenticated Arbitrary File Download to Sensitive Information ExposurePatched Version: 1.3.7Recommended Action: Update to version 1.3.7, or a newer patched version Plugin: Contact Form 7 Vulnerability: Authenticated (Editor+) Arbitrary File UploadPatched Version: 5.8.4Recommended Action: Update to version 5.8.4, or a newer patched version Plugin: Quotes for WooCommerce Vulnerability: Missing AuthorizationPatched Version: 2.0.2Recommended
Plugin: Backup Migration Vulnerability: Unauthenticated Arbitrary File Download to Sensitive Information ExposurePatched Version: 1.3.7Recommended Action: Update to version 1.3.7, or a newer patched version Plugin: Guest Author Vulnerability: Authenticated Stored Cross-Site ScriptingPatched Version: 2.4Recommended Action: Update to version 2.4, or a newer patched version Plugin: Abandoned Cart Lite for WooCommerce Vulnerability: Cross-Site Request ForgeryPatched Version:
Plugin: Backup Migration Vulnerability: Unauthenticated Arbitrary File Download to Sensitive Information ExposurePatched Version: 1.3.7Recommended Action: Update to version 1.3.7, or a newer patched version Plugin: Guest Author Vulnerability: Authenticated Stored Cross-Site ScriptingPatched Version: 2.4Recommended Action: Update to version 2.4, or a newer patched version Plugin: Abandoned Cart Lite for WooCommerce Vulnerability: Cross-Site Request ForgeryPatched Version:
Plugin: Theme My Login 2fa Vulnerability: 2FA Bypass via Brute ForcePatched Version: 1.2Recommended Action: Update to version 1.2, or a newer patched version Plugin: Video PopUp Vulnerability: Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodePatched Version: n/aRecommended Action: No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on your organization’s
