Search Vulnerabilities

Capgo - Hashed API Key Enforcement Bypass via PostgREST/RLS Plane

WordPress Time Capsule Plugin 1.21.16 Authentication Bypass

WordPress Ultimate Addons for Beaver Builder 1.2.4.1 Authentication Bypass

Steeltoe vulnerable to management-port isolation bypass via spoofed Host header

WordPress MStore API plugin <= 4.18.4 - Broken Authentication vulnerability

WordPress Melhor Envio plugin <= 2.16.3 - Broken Authentication vulnerability

WordPress wpForo Forum plugin <= 3.1.0 - Broken Authentication vulnerability

WordPress WooCommerce Dropshipping plugin <= 5.2.4 - Broken Authentication vulnerability

WordPress PowerPack Pro for Elementor plugin < v2.13.0 - Broken Authentication vulnerability

WordPress Booknetic plugin <= 4.8.5 - Account Takeover vulnerability

syracom Secure Login (2FA) for Confluence allows 2FA bypass via spoofed User-Agent

WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability

WordPress Really Simple SSL plugin <= 9.5.10 - Broken Authentication vulnerability

WordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.18.0 - Broken Authentication vulnerability

WordPress CloudSecure WP Security plugin <= 1.4.7 - Broken Authentication vulnerability

WordPress WP Full Stripe Free plugin <= 8.4.1 - Broken Authentication vulnerability

WordPress Simple Cloudflare Turnstile plugin <= 1.38.0 - Broken Authentication vulnerability

WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability

WordPress AutomatorWP plugin <= 5.6.7 - Broken Authentication vulnerability

WordPress ReviewX plugin <= 2.3.6 - Broken Authentication vulnerability