WordPress User Registration & Membership Plugin 4.1.2 – Authentication Bypass CVE-2025-2594 · High Open
WordPress Frontend Login and Registration Blocks Plugin 1.0.7 – Privilege Escalation CVE-2025-3605 · High Open
WordPress User Registration & Membership Plugin 4.1.1 – Unauthenticated Privilege Escalation High Open
WordPress Plugin – Membership For WooCommerce < v2.1.7 - Arbitrary File Upload to Shell (Unauthenticated) CVE-2022-4395 · Critical Open
WordPress Plugin Duplicator < 1.5.7.1 - Unauthenticated Sensitive Data Exposure to Account Takeover High Open
WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 – _Dashboard Redirect_ field Stored Cross-Site Scripting (XSS) Medium Open
WordPress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE) Critical Open
WordPress Plugin Masterstudy LMS – 3.0.17 – Unauthenticated Instructor Account Creation CVE-2023-4278 · High Open
WordPress Plugin EventON Calendar 4.4 – Unauthenticated Post Access via IDOR CVE-2023-3219 · High Open
WordPress Theme Medic v1.0.0 – Weak Password Recovery Mechanism for Forgotten Password CVE-2020-11027 · High Open
WordPress Theme Workreap 2.2.2 – Unauthenticated Upload Leading to Remote Code Execution CVE-2021-24499 · Critical Open
Paid Memberships Pro v2.9.8 (WordPress Plugin) – Unauthenticated SQL Injection CVE-2023-23488 · Critical Open
Translatepress Multilinugal WordPress plugin < 2.3.3 - Authenticated SQL Injection CVE-2022-3141 · Critical Open
