A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file …

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::post_ticket_reply of the file …

Unauthenticated Arbitrary File Deletion in MasterStudy LMS

Unauthenticated Cross Site Scripting (XSS) in Stripe Payments

Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – …

Unauthenticated Privilege Escalation in TranslatePress

Subscriber Broken Access Control in AutomatorWP

Unauthenticated PHP Object Injection in The Events Calendar

Unauthenticated Cross Site Scripting (XSS) in Toolset Blocks

Unauthenticated Cross Site Scripting (XSS) in Event Tickets

Unauthenticated PHP Object Injection in WP Project Manager

Unauthenticated Broken Authentication in WPLegalPages