آخرین آسیب‌پذیری‌ها

Royal MCP 1.4.38 - 1.5.9 - Subscriber+ Non-Public Post Disclosure via wp_search Ability

GoSMTP < 1.2.5 - Plugin Activator+ Privilege Escalation via SMTP Settings

Welcart e-Commerce < 2.12.6 - Author+ Arbitrary Product SKU Update and Disclosure via item_sku_ajax

Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter

Welcart e-Commerce < 2.12.6 - Editor+ SQLi via 'log_id' Parameter

Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected XSS via 'pwsms_mobiles' Parameter

WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update

Copy Anything to Clipboard < 5.5.5 - Contributor+ Stored XSS via 'success-text' Shortcode Attribute

Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler

Page Builder by SiteOrigin < 2.38.0 - Contributor+ Sensitive Data Disclosure via Post Loop Widget Query Arguments

Page Builder by SiteOrigin < 2.38.0 - Contributor+ Stored XSS via panels_info.class

PayPlug for WooCommerce 2.9.0 - 3.1.0 - Unauthenticated Order Key Disclosure and Order Cancellation via payplug_create_intent

Royal Elementor Addons 1.3.81 - 1.7.1069 - Unauthenticated Non-Public Post Content Disclosure via wpr_get_page_content

Royal Elementor Addons 1.7.1037 - 1.7.1069 - Contributor+ Stored XSS via Google Maps Widget Height Setting

Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribe

Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID Collision

Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion

Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion

Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient

WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation Attribute

Thrive Automator < 11.2 - Editor+ Blind SQLi via 'additional' Parameter

Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload

Casso Auto-confirm Bank Transfer < 4.2.0 - Unauthenticated WooCommerce Order Payment Confirmation

Payconiq for WooCommerce <= 1.0.4 - Unauthenticated Order Key Disclosure

UniPAY Payment Gateway For WooCommerce <= 2.3 - Unauthenticated Order Payment Forgery via Empty IPN Secret