Vulnerability archive: section 6, page 27
Open a report to review affected versions, available fixes and original sources. Each report covers a specific issue; its presence does not establish whether your website is affected.
- Taboola Pixel <= 1.1.4 - Reflected Cross-Site Scripting
- Ray Enterprise Translation <= 1.7.0 - Unauthenticated Local File Inclusion
- GSheets Connector <= 1.1.1 - Authenticated (Administrator+) PHP Object Injection
- Awesome Event Booking <= 2.7.5 - Cross-Site Request Forgery
- Advanced Recent Posts <= 0.6.14 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
- Private Files <= 0.40 - Cross-Site Request Forgery to Disable Protection
- Masterstudy < 4.8.122 - Missing Authorization
- Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets
- WP Better Emails <= 0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
- PowerPack Pro for Elementor <= 2.10.14 - Authenticated (Contributor+) Privilege Escalation
- GST for WooCommerce <= 2.0 - Cross-Site Request Forgery
- Multi-language Responsive Contact Form <= 2.8 - Missing Authorization
- Kimili Flash Embed <= 2.5.3 - Cross-Site Request Forgery
- Addonify – Quick View For WooCommerce <= 1.2.16 - Unauthenticated Full Path Dislcosure
- Click & Pledge Connect Plugin <= 2.24080000-WP6.6.1 - Unauthenticated SQL Injection
- Media folder Addon <= 4.1.6 - Unauthenticated Arbitrary File Read
- WordPress File Upload <= 4.24.7 - Reflected Cross-Site Scripting
- Read More Without Refresh <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
- WooCommerce PDF Invoice Builder <= 1.2.89 - Authenticated (Subscriber+) SQL Injection via Export
- Ohio Extra <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Post Grid, Slider & Carousel Ultimate <= 1.4.3 - Authenticated (Admin+) Cross-Site Scripting