Search vulnerabilities

Expected end of text, found '/' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,805

CVE-2021-25114

Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection

The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection

CVSS 3.1 · 9.8 Critical EPSS 81.8% KEV · Not listed
Vendors
Strangerstudios
Products
Paid Memberships Pro
CVE-2021-25113

Dropdown Menu Widget <= 1.9.7 - Subscriber+ Arbitrary Settings Update to Stored XSS

The Dropdown Menu Widget WordPress plugin through 1.9.7 does not have authorisation and CSRF checks when saving its settings, allowing low privilege users such as subscriber to update them. Due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Dropdown Menu Widget Project
Products
Dropdown Menu Widget
CVE-2021-25112

WHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)

The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS 2.2% KEV · Not listed
Vendors
I-plugins
Products
Whmcs Bridge
CVE-2021-25111

English WordPress Admin < 1.5.2 - Unauthenticated Open Redirect

The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue

CVSS 3.1 · 6.1 Medium EPSS 1.9% KEV · Not listed
Vendors
English Wordpress Admin Project
Products
English Wordpress Admin
CVE-2021-25110

Futurio Extra < 1.6.3 - Subscriber+ User Email Address Disclosure

The Futurio Extra WordPress plugin before 1.6.3 allows any logged in user, such as subscriber, to extract any other user's email address.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Futuriowp
Products
Futurio Extra
CVE-2021-25109

Futurio Extra < 1.6.3 - Authenticated SQL Injection

The Futurio Extra WordPress plugin before 1.6.3 is affected by a SQL Injection vulnerability that could be used by high privilege users to extract data from the database as well as used to perform Cross-Site Scripting (XSS) against logged in admins by making send open a malicious link.

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Futuriowp
Products
Futurio Extra
CVE-2021-25108

IP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRF

The IP2Location Country Blocker WordPress plugin before 2.26.6 does not have CSRF check in the ip2location_country_blocker_save_rules AJAX action, allowing attackers to make a logged in admin block arbitrary country, or block all of them at once, preventing users from accessing the frontend.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Ip2location
Products
Country Blocker
CVE-2021-25107

Form Store to DB < 1.1.1 - Unauthenticated Stored Cross-Site Scripting

The Form Store to DB WordPress plugin before 1.1.1 does not sanitise and escape parameter keys before outputting it back in the created entry, allowing unauthenticated attacker to perform Cross-Site Scripting attacks against admin

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Accesspressthemes
Products
Form Store To Db
CVE-2021-25106

WPLegalPages < 2.7.1 - Subscriber+ Arbitrary Settings Update to Stored XSS

The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages WordPress plugin before 2.7.1 does not check for authorisation and has a flawed CSRF logic when saving its settings, allowing any authenticated users, such as subscriber, to update them. Furthermore, due to the lack of sanitisation and escaping, it could lead to Stored Cross-Site Scripting

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Wpeka
Products
Wplegalpages
CVE-2021-25105

Ivory Search < 5.4.1 - Multiple Admin+ Stored Cross-Site Scripting

The Ivory Search WordPress plugin before 5.4.1 does not escape some of the Form settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Ivorysearch
Products
Ivory Search
CVE-2021-25104

Ocean Extra < 1.9.5 - Reflected Cross-Site Scripting

The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is active, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Oceanwp
Products
Ocean Extra
CVE-2021-25103

GTranslate < 2.9.7 - Reflected Cross-Site Scripting

The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in the url_addon/gtranslate-email.php file before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue. Note: exploitation of the issue requires knowledge of the NONCE_SALT and NONCE_KEY

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Gtranslate
Products
Translate Wordpress With Gtranslate
CVE-2021-25102

All In One WP Security < 4.4.11 - Authenticated Reflected Cross-Site Scripting

The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirect_to parameter before using it to redirect user, either via a Location header, or meta url attribute, when the Rename Login Page is active, which could lead to an Arbitrary Redirect as well as Cross-Site Scripting issue. Exploitation of this issue requires the Login Page URL value to be known, which should be hard to guess, reducing the risk

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Tipsandtricks-hq
Products
All In One Wp Security \& Firewall
CVE-2021-25101

Anti-Malware Security and Brute-Force Firewall < 4.20.94 - Admin+ Reflected Cross-Site Scripting

The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.94 does not sanitise and escape the POST data before outputting it back in attributes of an admin page, leading to a Reflected Cross-Site scripting. Due to the presence of specific parameter value, available to admin users, this can only be exploited by an admin against another admin user.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Anti-malware Security And Brute-force Firewall Project
Products
Anti-malware Security And Brute-force Firewall
CVE-2021-25100

Give < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms Dashboard

The GiveWP WordPress plugin before 2.17.3 does not escape the s parameter before outputting it back in an attribute in the Donation Forms dashboard, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Givewp
Products
Givewp
CVE-2021-25099

Give < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting

The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_id parameter before outputting it back in the response of an unauthenticated request via the give_checkout_login AJAX action, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS 2.1% KEV · Not listed
Vendors
Givewp
Products
Givewp
CVE-2021-25098

Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF

The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fatcatapps
Products
Easy Pricing Tables
CVE-2021-25097

LabTools <= 1.0 - Subscriber+ Arbitrary Publication Deletion

The LabTools WordPress plugin through 1.0 does not have proper authorisation and CSRF check in place when deleting publications, allowing any authenticated users, such as subscriber to delete arbitrary publication

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Creativityjuice
Products
Labtools
CVE-2021-25096

IP2Location Country Blocker < 2.26.5 - Ban Bypass

The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL

CVSS 3.1 · 6.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Ip2location
Products
Country Blocker
CVE-2021-25095

IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban

The IP2Location Country Blocker WordPress plugin before 2.26.5 does not have authorisation and CSRF checks in the ip2location_country_blocker_save_rules AJAX action, allowing any authenticated users, such as subscriber to call it and block arbitrary country, or block all of them at once, preventing users from accessing the frontend.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Ip2location
Products
Country Blocker