WordPress Security

WordPress Login with YourMembership - YM SSO Login plugin <= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes' vulnerability

WordPress FunKItools plugin <= 1.0.2 - Cross-Site Request Forgery to Settings Update vulnerability

WordPress Quick Featured Images plugin <= 13.7.2 - Insecure Direct Object Reference to Image Manipulation vulnerability

WordPress External Login plugin <= 1.11.2 - Unauthenticated SQL Injection via log vulnerability

WordPress Quick Social Login plugin <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

WordPress onOffice for WP-Websites plugin <= 5.7 - Authenticated (Editor+) SQL Injection vulnerability

WordPress TopBar plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update vulnerability

WordPress Ova Advent plugin <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

WordPress Zip Attachments plugin <= 1.6 - Missing Authorization to Limited File Deletion vulnerability

WordPress Flex QR Code Generator plugin <= 1.2.5 - Unauthenticated Arbitrary File Upload vulnerability