Reflected XSS in Social Pug – Easy Social Share Buttons could allow an attacker to do almost anything an admin user can
Severity: Medium
Advisories
Reflected XSS in MailChimp for WordPress could allow an attacker to do almost anything an admin user can
Severity: Medium
copy-me vulnerable to CSRF allowing unauthenticated attacker to copy posts
Severity: Medium
SQL injection and unserialization vulnerability in Relevanssi Premium could allow admins to execute arbitrary code (in some circumstances)
Severity: High
Unserialization vulnerability in Relevanssi Premium could allow admins to execute arbitrary code (in some circumstances)
Severity: High
Unserialisation in Post Indexer could allow man-in-the-middle to execute arbitrary code (in some circumstances)
Severity: High
SQL Injection in Post Indexer allows super admins to read the contents of the database
Severity: Medium
Stored XSS in Advanced Custom Fields: Table Field allows authenticated users to do almost anything an admin user can
Severity: Medium
CSRF in Watu PRO allows unauthenticated attackers to delete quizzes
Severity: Medium
Stored XSS in Watu PRO allows unauthenticated attackers to do almost anything an admin can
Severity: Medium