| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Unauthenticated Insecure Direct Object References (IDOR) in Razorpay for WooCommerce <= 4.8.7 versions. |
| Contributor Broken Access Control in RomethemeForm For Elementor <= 1.2.6 versions. |
| Subscriber Broken Authentication in User Registration <= 5.2.6 versions. |
| Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions. |
| Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions. |
| Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions. |
| Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions. |
| Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions. |
| Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions. |
| Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions. |
| Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions. |
| Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions. |
| Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions. |
| Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions. |
| Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions. |
| Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions. |
| Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions. |
| Subscriber Privilege Escalation in The Grid <= 2.7.9.1 versions. |
| The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.29.9. The vulnerability exists because `ActionUser::conditions_logic()` gates the `current_user_can('edit_user', $user_id)` authorization check behind an `is_numeric()` test, causing the check to be skipped entirely when `$user_id` is a non-numeric string — a condition that can be induced by passing a crafted value such as `1one` through the unvalidated `item_id` parameter of the unauthenticated `wp_ajax_nopriv_frontend_admin/forms/change_form` AJAX endpoint. This makes it possible for attackers to escalate privileges to administrator by obtaining a server-signed `_acf_objects` payload carrying the non-numeric user ID, which WordPress subsequently coerces to integer 1 (the default administrator), allowing the attacker to overwrite that account's password or email address. Exploitation by unauthenticated users requires a public-facing frontend user form to be configured; in all other cases a subscriber-level account is sufficient. |
| The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the (top-level template code) function. This makes it possible for unauthenticated attackers to delete arbitrary WordPress options, including critical ones such as siteurl, home, active_plugins, template, and stylesheet, causing site outage or a full plugin and theme reset via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. |
