WP सुरक्षा कमजोरियों की रिपोर्ट

WordPress IDonate प्लगइन 2.1.5 - 2.1.9 - प्रमाणित (सदस्य+) खाता अधिग्रहण/अधिकार वृद्धि के लिए idonate_donor_password फ़ंक्शन भेद्यता

वर्डप्रेस ग्रेविटी फॉर्म्स प्लगइन <= 2.9.20 - बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड 'copy_post_image' भेद्यता के माध्यम से

WordPress The Events Calendar plugin 6.15.1.1 - 6.15.9 - Unauthenticated SQL Injection via s vulnerability

WordPress FunnelKit Automations plugin <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending vulnerability

WordPress Depicter Slider plugin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload vulnerability

WordPress Document Embedder plugin <= 2.0.0 - Missing Authorization to Unauthenticated Document Manipulation vulnerability

WordPress Paid Membership Subscriptions plugin <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal vulnerability

WordPress Image Comparison Addon for Elementor plugin <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload vulnerability

WordPress Image Comparison Addon for Elementor plugin <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload vulnerability

WordPress Posts Navigation Links for Sections and Headings plugin <= 1.0.1 - Cross-Site Request Forgery to Settings Update vulnerability