Deserialization of Untrusted Data vulnerability in Marcin Wise Chat wise-chat allows Object Injection.This issue affects Wise Chat: from n/a through 3.4.2.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider master-slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.11.3.
Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.
Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions.
Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions.
Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.
Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions.
Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions.
Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions.
Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor & Themes <= 2.1.2 versions.
Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.
Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.
Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.
Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.
Unauthenticated Broken Authentication in Graphina <= 3.1.12 versions.
Unauthenticated Cross Site Scripting (XSS) in Security & Malware scan by CleanTalk <= 2.189 versions.
Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.
Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.
Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions.