Vulnerability archive: section 14, page 27

Open a report to review affected versions, available fixes and original sources. Each report covers a specific issue; its presence does not establish whether your website is affected.

• Ajax Search Pro <= 3.5 - Cross-Site Request Forgery
• Zip Attachments <= 1.6 - Missing Authorization to Unauthenticated Private And Password-Protected Posts Attachment Disclosure
• Testimonials Widget <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
• Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages < 3.7.1 - Unauthenticated Information Exposure
• CarSpot – Dealership Wordpress Classified Theme < 2.1.7 - Authenticated Stored Cross-Site Scripting
• Ultimate YouTube Video & Shorts Player With Vimeo <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Setting Exposure
• Cost Calculator Builder PRO <= 3.1.75 - Unauthenticated Arbitrary Email Sending
• GeoDirectory <= 2.3.70 - Missing Authorization via geodirectory_rated()
• Advanced Access Manager <= 6.9.18 - Authenticated (Author+) Open Redirect
• Token Login <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
• WP Easy Gallery – WordPress Gallery Plugin <= 4.8.5 - Authenticated (Subscriber+) SQL Injection
• S3 Video <= 0.983 - Reflected Cross-Site Scripting