Lana Codes

The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via an AJAX action in versions up to, and including, 2.14.0. This makes it possib

Google Map Shortcode <= 3.1.2 - Contributor+ Stored XSS

The Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions starting from 1.0.7 up to, and including, 1.1.1. This is due to missing nonce validation in the 'createTempAccountLink' function. This makes it possible fo

The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteUser' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated att

The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticat

Pricing Tables For WPBakery Page Builder < 3.0 - Subscriber+ LFI

Active Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data Disclosure

Avirato hotels online booking engine <= 5.0.5 - Subscriber+ SQLi

Newsletter Popup <= 1.2 - Record Deletion via CSRF

Newsletter Popup <= 1.2 - Unauthenticated Stored XSS