Medium - CVE-2024-13806 - The The Authors List plugin for WordPress is...
The The Authors List plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0.6. This is due to the software allowing users to execute an action...
High - CVE-2024-13911 - The Database Backup and check Tables Automated...
The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.35 via the...
Critical - CVE-2025-1564 - The SetSail Membership plugin for WordPress is...
The SetSail Membership plugin for WordPress is vulnerable to in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a users identity through the social...
Critical - CVE-2025-1638 - The Alloggio Membership plugin for WordPress is...
The Alloggio Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's...
Critical - CVE-2025-1671 - The Academist Membership plugin for WordPress...
The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6. This is due to the academist_membership_check_facebook_user()...
High - CVE-2024-13611 - The Better Messages – Live Chat for WordPress,...
The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and...
Medium - CVE-2024-13697 - The Better Messages – Live Chat for WordPress,...
The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including,...
High - CVE-2024-13910 - The Database Backup and check Tables Automated...
The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the...
Medium - CVE-2025-1291 - The Gutenberg Blocks with AI by Kadence WP –...
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘icon’ parameter in all versions up to, and including,...
Medium - CVE-2024-13546 - The GenerateBlocks plugin for WordPress is...
The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.1 via the 'get_image_description' function. This makes it...