s:70071:"O:8:"stdClass":8:{s:12:"last_checked";s:19:"2026-06-18 16:28:29";s:19:"num_vulnerabilities";i:103;s:27:"num_plugins_vulnerabilities";i:103;s:26:"num_themes_vulnerabilities";i:0;s:6:"status";s:11:"in_progress";s:4:"core";O:8:"stdClass":2:{s:7:"version";s:5:"6.9.4";s:15:"vulnerabilities";a:0:{}}s:6:"themes";O:8:"stdClass":6:{s:10:"kava-child";O:8:"stdClass":2:{s:7:"version";s:5:"1.0.1";s:15:"vulnerabilities";a:0:{}}s:4:"kava";O:8:"stdClass":2:{s:7:"version";s:5:"2.1.2";s:15:"vulnerabilities";a:0:{}}s:16:"twentytwentyfive";O:8:"stdClass":2:{s:7:"version";s:3:"1.4";s:15:"vulnerabilities";a:0:{}}s:16:"twentytwentyfour";O:8:"stdClass":2:{s:7:"version";s:3:"1.0";s:15:"vulnerabilities";a:0:{}}s:17:"twentytwentythree";O:8:"stdClass":2:{s:7:"version";s:3:"1.3";s:15:"vulnerabilities";a:0:{}}s:15:"twentytwentytwo";O:8:"stdClass":2:{s:7:"version";s:3:"1.2";s:15:"vulnerabilities";a:0:{}}}s:7:"plugins";O:8:"stdClass":28:{s:19:"akismet/akismet.php";O:8:"stdClass":2:{s:7:"version";s:3:"5.7";s:15:"vulnerabilities";a:0:{}}s:51:"all-in-one-wp-migration/all-in-one-wp-migration.php";O:8:"stdClass":2:{s:7:"version";s:5:"7.102";s:15:"vulnerabilities";a:0:{}}s:91:"all-in-one-wp-migration-unlimited-extension/all-in-one-wp-migration-unlimited-extension.php";O:8:"stdClass":2:{s:7:"version";s:4:"2.82";s:15:"vulnerabilities";a:1:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"4d7317ec-bf98-4ac1-b677-d2936c61d938";s:5:"title";s:165:"All-in-One WP Migration Unlimited Extension < 2.84 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download";s:8:"fixed_in";s:4:"2.84";s:11:"description";s:688:"The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.83. This is due to the 'Ai1wmve_Schedules_Controller::save' handler for 'admin_post_ai1wm_schedule_event_save' not verifying user capabilities before saving schedule data. This makes it possible for authenticated attackers, with subscriber-level access and above, to create scheduled export jobs and send backup notifications to attacker-controlled email addresses. Because such notifications include the random backup filename, full site backups can subsequently be downloaded from the target site, resulting in sensitive information exposure.";s:13:"introduced_in";N;}}}s:25:"bit-social/bit-social.php";O:8:"stdClass":2:{s:7:"version";s:6:"1.13.3";s:15:"vulnerabilities";a:0:{}}s:33:"bit-social-pro/bit-social-pro.php";O:8:"stdClass":2:{s:7:"version";s:7:"1.13.10";s:15:"vulnerabilities";a:0:{}}s:39:"button-contact-vr/button-contact-vr.php";O:8:"stdClass":2:{s:7:"version";s:5:"5.0.4";s:15:"vulnerabilities";a:0:{}}s:57:"category-subcategory-list-widget/category-list-widget.php";O:8:"stdClass":2:{s:7:"version";s:3:"6.0";s:15:"vulnerabilities";a:0:{}}s:23:"site-mode/site-mode.php";O:8:"stdClass":2:{s:7:"version";s:5:"1.1.1";s:15:"vulnerabilities";a:1:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"ec96eaa7-0d3d-48c6-a4da-5a954ee367fc";s:5:"title";s:77:"Coming Soon, Maintenance Mode <= 1.1.1 - Unauthenticated Local File Inclusion";s:8:"fixed_in";N;s:11:"description";s:472:"The Coming Soon, Maintenance Mode plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.";s:13:"introduced_in";N;}}}s:49:"content-aware-sidebars/content-aware-sidebars.php";O:8:"stdClass":2:{s:7:"version";s:6:"3.19.3";s:15:"vulnerabilities";a:0:{}}s:58:"easy-maintenance-mode-by-wpkoder/easy-maintenance-mode.php";O:8:"stdClass":2:{s:7:"version";s:3:"1.7";s:15:"vulnerabilities";a:0:{}}s:35:"ele-custom-skin/ele-custom-skin.php";O:8:"stdClass":2:{s:7:"version";s:5:"3.1.7";s:15:"vulnerabilities";a:0:{}}s:43:"ele-custom-skin-pro/ele-custom-skin-pro.php";O:8:"stdClass":2:{s:7:"version";s:5:"3.2.4";s:15:"vulnerabilities";a:0:{}}s:23:"elementor/elementor.php";O:8:"stdClass":2:{s:7:"version";s:5:"3.7.8";s:15:"vulnerabilities";a:28:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"a875836d-77f4-4306-b275-2b60efff1493";s:5:"title";s:48:"Elementor Website Builder < 3.12.2 - Admin+ SQLi";s:8:"fixed_in";s:6:"3.12.2";s:11:"description";s:207:"The plugin does not properly sanitize and escape the Replace URL parameter in the Tools module before using it in a SQL statement, leading to a SQL injection exploitable by users with the Administrator role.";s:13:"introduced_in";N;}i:1;O:8:"stdClass":5:{s:2:"id";s:36:"0b68091c-6a05-4f81-a718-6ec139df2e96";s:5:"title";s:58:"Elementor Website Builder < 3.13.2 - Missing Authorization";s:8:"fixed_in";s:6:"3.13.2";s:11:"description";s:233:"The plugin does not check user capabilities on several functions, allowing authenticated attackers with a low amount of privilege (such as Subscribers) to perform actions that should only be available to users with higher privileges.";s:13:"introduced_in";N;}i:2;O:8:"stdClass":5:{s:2:"id";s:36:"62b53acf-6551-4ea7-8727-039a3c9ba7ce";s:5:"title";s:114:"Elementor Website Builder < 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_inline_svg()";s:8:"fixed_in";s:6:"3.16.5";s:11:"description";s:425:"The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the get_inline_svg() function in versions up to, and including, 3.16.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:3;O:8:"stdClass":5:{s:2:"id";s:36:"e60f0f7e-4c3b-4107-803a-8e03526859ed";s:5:"title";s:87:"Elementor Website Builder < 3.16.5 - Missing Authorization to Arbitrary Attachment Read";s:8:"fixed_in";s:6:"3.16.5";s:11:"description";s:335:"The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_inline_svg function in all versions up to, and including, 3.16.4. This makes it possible for authenticated attackers, with contributor-level access and above, to read arbitrary attachment files.";s:13:"introduced_in";N;}i:4;O:8:"stdClass":5:{s:2:"id";s:36:"a6b3b14c-f06b-4506-9b88-854f155ebca9";s:5:"title";s:82:"Elementor < 3.18.2 - Contributor+ Arbitrary File Upload to RCE via Template Import";s:8:"fixed_in";s:6:"3.18.2";s:11:"description";s:227:"The plugin is vulnerable to Remote Code Execution via file upload via the template import functionality, allowing authenticated attackers, with contributor-level access and above, to upload files and execute code on the server.";s:13:"introduced_in";N;}i:5;O:8:"stdClass":5:{s:2:"id";s:36:"4d7dfcc6-8c32-4e0d-b3bb-7e2685916e2b";s:5:"title";s:97:"Elementor < 3.19.1 - Authenticated(Contributor+) Arbitrary File Deletion and PHAR Deserialization";s:8:"fixed_in";s:6:"3.19.1";s:11:"description";s:514:"The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to arbitrary file deletions and PHAR deserialization in version up to, and including 3.19.0. This is due to the plugin not providing sufficient path validation on the 'tmp_name' parameter . This makes it possible for authenticated attackers, with contributor-level access and above, to delete arbitrary files and inject PHP Objects through the use of a phar wrapper, both of which can lead to remote code execution.";s:13:"introduced_in";N;}i:6;O:8:"stdClass":5:{s:2:"id";s:36:"57af46d9-9a26-4085-9829-e0add7893332";s:5:"title";s:145:"Elementor Website Builder – More than Just a Page Builder < 3.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_alt";s:8:"fixed_in";s:6:"3.19.0";s:11:"description";s:531:"The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $instance[alt] parameter in the get_image_alt function in all versions up to, and including, 3.18.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor access or higher to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.";s:13:"introduced_in";N;}i:7;O:8:"stdClass":5:{s:2:"id";s:36:"22e8d017-79f5-40c8-8a2c-e0ee42ba80c8";s:5:"title";s:64:"Elementor Website Builder < 3.20.3 - Contributor+ DOM Stored XSS";s:8:"fixed_in";s:6:"3.20.3";s:11:"description";s:329:"The plugin is vulnerable to Stored Cross-Site Scripting via the plugin's Path Widget due to insufficient output escaping on user supplied attributes, allowingnauthenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:8;O:8:"stdClass":5:{s:2:"id";s:36:"8b8f30d6-bd11-4155-bfd2-3ac15248382b";s:5:"title";s:64:"Elementor Website Builder < 3.21.6 - Contributor+ DOM Stored XSS";s:8:"fixed_in";s:6:"3.21.6";s:11:"description";s:365:"The plugin is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘hover_animation’ parameter due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:9;O:8:"stdClass":5:{s:2:"id";s:36:"e6d56be1-9a2a-426f-88ca-1ffa773622c1";s:5:"title";s:72:"Elementor Website Builder < 3.22.2 - Contributor+ Arbitrary SVG Download";s:8:"fixed_in";s:6:"3.22.2";s:11:"description";s:369:"The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to arbitrary SVG file download in all versions up to, and including, 3.22.1. This is due to the plugin not properly restricting access to files. This makes it possible for authenticated attackers, with contributor-level access and above, to download arbitrary SVG files.";s:13:"introduced_in";N;}i:10;O:8:"stdClass":5:{s:2:"id";s:36:"5200943b-5e07-4342-a090-f78435e30d30";s:5:"title";s:168:"Elementor Website Builder – More than Just a Page Builder < 3.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets";s:8:"fixed_in";s:6:"3.24.0";s:11:"description";s:502:"The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url parameter of multiple widgets in all versions up to, and including, 3.23.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in Elementor Editor pages. This was partially patched in version 3.23.2.";s:13:"introduced_in";N;}i:11;O:8:"stdClass":5:{s:2:"id";s:36:"dce5ad0c-3ce9-498f-b0f7-8dfd6ee82e40";s:5:"title";s:72:"Elementor < 3.24.6 - Contributor+ Information Exposure via get_image_alt";s:8:"fixed_in";s:6:"3.24.6";s:11:"description";s:260:"The plugin is vulnerable to Basic Information Exposure via the get_image_alt function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract either excerpt data or titles of private or password-protected posts.";s:13:"introduced_in";N;}i:12;O:8:"stdClass":5:{s:2:"id";s:36:"78f0847b-3f59-43cf-87db-2cadda862aa3";s:5:"title";s:60:"Elementor Website Builder < 3.25.8 - Contributor+ Stored XSS";s:8:"fixed_in";s:6:"3.25.8";s:11:"description";s:357:"The plugin is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter of the Icon widget due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:13;O:8:"stdClass":5:{s:2:"id";s:36:"2e05843d-1797-4da9-99ec-06376484fb32";s:5:"title";s:85:"Elementor Website Builder < 3.25.10 - Contributor+ Stored XSS via Typography Settings";s:8:"fixed_in";s:7:"3.25.10";s:11:"description";s:375:"The plugin is vulnerable to Stored Cross-Site Scripting via the plugin's Typography Settings due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:14;O:8:"stdClass":5:{s:2:"id";s:36:"25374232-2f9c-453d-bc47-124f80e67a92";s:5:"title";s:60:"Elementor Website Builder < 3.27.5 - Contributor+ Stored XSS";s:8:"fixed_in";s:6:"3.27.5";s:11:"description";s:352:"The plugin is vulnerable to Stored Cross-Site Scripting via the border, margin and gap parameters due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:15;O:8:"stdClass":5:{s:2:"id";s:36:"61e1476a-cb14-46f9-b68c-4fd5b5c39597";s:5:"title";s:61:"Elementor Website Builder < 3.25.11 - Contributor+ Stored XSS";s:8:"fixed_in";s:7:"3.25.11";s:11:"description";s:310:"The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:16;O:8:"stdClass":5:{s:2:"id";s:36:"fc8e4264-fa78-44d2-8b6d-6c4305cd2280";s:5:"title";s:60:"Elementor Website Builder < 3.29.1 - Contributor+ Stored XSS";s:8:"fixed_in";s:6:"3.29.1";s:11:"description";s:312:"The plugins are vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:17;O:8:"stdClass":5:{s:2:"id";s:36:"34330a7b-d178-4998-9067-17ae2564cb9a";s:5:"title";s:44:"Elementor < 3.29.1 - Contributor+ Stored XSS";s:8:"fixed_in";s:6:"3.29.1";s:11:"description";s:441:"The plugin is vulnerable to Stored Cross-Site Scripting via the plugin's 'elementor-element' shortcode due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only impacts sites with 'Element Caching' enabled.";s:13:"introduced_in";N;}i:18;O:8:"stdClass":5:{s:2:"id";s:36:"785a15fe-18ef-4ae2-9143-c625a7a16063";s:5:"title";s:65:"Elementor < 3.30.3 - Contributor+ Stored XSS via Text Path Widget";s:8:"fixed_in";s:6:"3.30.3";s:11:"description";s:416:"The plugin is vulnerable to Stored Cross-Site Scripting via the data-text DOM element attribute in Text Path widget due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This attack affects only Chrome/Edge browsers";s:13:"introduced_in";N;}i:19;O:8:"stdClass":5:{s:2:"id";s:36:"87fd0b78-c0e8-43a8-8b52-bd7a294a96e0";s:5:"title";s:64:"Elementor < 3.30.3 - Admin+ Arbitrary File Read via Image Import";s:8:"fixed_in";s:6:"3.30.3";s:11:"description";s:335:"The plugin is vulnerable to Arbitrary File Read via the Import_Images::import() function due to insufficient controls on the filename specified. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.";s:13:"introduced_in";N;}i:20;O:8:"stdClass":5:{s:2:"id";s:36:"ebb1b7b0-cb97-4430-ac6a-e27fe8714b0e";s:5:"title";s:58:"Elementor Website Builder < 3.33.1 - Missing Authorization";s:8:"fixed_in";s:6:"3.33.1";s:11:"description";s:224:"The plugin is vulnerable to unauthorized access due to a missing capability check on a function. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action.";s:13:"introduced_in";N;}i:21;O:8:"stdClass":5:{s:2:"id";s:36:"bfe75150-4ae3-44c1-b886-4ff90ca9f0f4";s:5:"title";s:69:"Elementor < 3.33.4  - Contributor+ Stored DOM-Based XSS via Text Path";s:8:"fixed_in";s:6:"3.33.4";s:11:"description";s:387:"The plugin is vulnerable to Stored Cross-Site Scripting via the plugin's Text Path widget  due to insufficient neutralization of user-supplied input used to build SVG markup inside the widget. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:22;O:8:"stdClass":5:{s:2:"id";s:36:"44a36810-631b-47ca-82f7-e90a5bda1538";s:5:"title";s:103:"Elementor Website Builder < 3.35.8 - Contributor+ Sensitive Information Exposure via Elementor Template";s:8:"fixed_in";s:6:"3.35.8";s:11:"description";s:498:"The plugin is vulnerable to Incorrect Authorization to Sensitive Information Exposure due to a logic error in the is_allowed_to_read_template() function permission check that treats non-published templates as readable without verifying edit capabilities. This makes it possible for authenticated attackers, with contributor-level access and above, to read private or draft Elementor template content via the 'template_id' supplied to the 'get_template_data' action of the 'elementor_ajax' endpoint.";s:13:"introduced_in";N;}i:23;O:8:"stdClass":5:{s:2:"id";s:36:"77ad91f1-81e5-45c7-86e9-8fb5d1abaf0b";s:5:"title";s:73:"Elementor Website Builder < 3.35.6 - Contributor+ Stored XSS via REST API";s:8:"fixed_in";s:6:"3.35.6";s:11:"description";s:340:"The plugin is vulnerable to Stored Cross-Site Scripting via several widget parameters due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:24;O:8:"stdClass":5:{s:2:"id";s:36:"0a965d76-8557-4e1d-8ba2-65bcf22e6fff";s:5:"title";s:58:"Elementor Website Builder < 3.35.6 - Missing Authorization";s:8:"fixed_in";s:6:"3.35.6";s:11:"description";s:219:"The plugin is vulnerable to unauthorized access due to a missing capability check on a function. This makes it possible for authenticated attackers, with author-level access and above, to perform an unauthorized action.";s:13:"introduced_in";N;}i:25;O:8:"stdClass":5:{s:2:"id";s:36:"76dec1e6-2504-4405-ab7b-31650e23212f";s:5:"title";s:60:"Elementor Website Builder < 3.35.6 - Contributor+ Stored XSS";s:8:"fixed_in";s:6:"3.35.6";s:11:"description";s:310:"The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:26;O:8:"stdClass":5:{s:2:"id";s:36:"608854ac-1257-49ea-bfce-08304a921ac8";s:5:"title";s:72:"Elementor Website Builder < 4.0.5 - Contributor+ Stored XSS via REST API";s:8:"fixed_in";s:5:"4.0.5";s:11:"description";s:960:"The plugin is vulnerable to Stored Cross-Site Scripting via the _elementor_data meta field due to insufficient input sanitization when processing form-encoded REST API requests. The plugin registers the _elementor_data meta field with show_in_rest but omits a sanitize_callback, relying instead on a rest_pre_insert_post filter (sanitize_post_data function) that only sanitizes JSON-encoded request bodies. When a contributor sends a form-encoded PATCH request to the WordPress REST API, the json_decode() call on the raw body returns null, causing all sanitization to be skipped. The unsanitized data is then stored via update_post_meta() and later output without escaping through multiple widget sinks including the HTML widget's print_unescaped_setting() function. This makes it possible for authenticated attackers with Contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:27;O:8:"stdClass":5:{s:2:"id";s:36:"bac7b428-9967-4c34-8519-8e39b0d52087";s:5:"title";s:57:"Elementor Website Builder < 4.1.1 - Missing Authorization";s:8:"fixed_in";s:5:"4.1.1";s:11:"description";s:224:"The plugin is vulnerable to unauthorized access due to a missing capability check on a function. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action.";s:13:"introduced_in";N;}}}s:31:"elementor-pro/elementor-pro.php";O:8:"stdClass":2:{s:7:"version";s:5:"3.7.7";s:15:"vulnerabilities";a:12:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"73e8e030-8e8b-43de-a602-c699ab2eafaf";s:5:"title";s:61:"Elementor Pro < 3.11.7 - Subscriber+ Arbitrary Options Update";s:8:"fixed_in";s:6:"3.11.7";s:11:"description";s:338:"The plugin does not have authorisation in an AJAX action (relying only on a nonce, which is available to any authenticated users), and does not validate the options to be updated. This allows any authenticated users, such as subscriber to update arbitrary blog options, such as the default_role, when the WooCommerce plugin is also active";s:13:"introduced_in";N;}i:1;O:8:"stdClass":5:{s:2:"id";s:36:"52195b1a-31b9-46da-bed8-7fdd2c6c8c14";s:5:"title";s:74:"Elementor Pro < 3.19.3 - Authenticated (Contributor+) Information Exposure";s:8:"fixed_in";s:6:"3.19.3";s:11:"description";s:281:"The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.19.2 . This makes it possible for authenticated attackers, with contributor-level access and above, to extract arbitrary user meta values.";s:13:"introduced_in";N;}i:2;O:8:"stdClass":5:{s:2:"id";s:36:"d332bb66-e69c-4d11-8ff2-2c35d7ce2808";s:5:"title";s:100:"Elementor Website Builder Pro < 3.20.2 - Authententicated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:6:"3.20.2";s:11:"description";s:453:"The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget's custom_id in all versions up to, and including, 3.20.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:3;O:8:"stdClass":5:{s:2:"id";s:36:"964c149d-fb08-4f86-a9a8-34a4412b5fdd";s:5:"title";s:126:"Elementor Website Builder Pro < 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag";s:8:"fixed_in";s:6:"3.20.2";s:11:"description";s:426:"The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the video_html_tag attribute in all versions up to, and including, 3.20.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:4;O:8:"stdClass":5:{s:2:"id";s:36:"a48b0031-02f6-4871-beb3-0f61e1cd3d28";s:5:"title";s:97:"Elementor Website Builder Pro < 3.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:6:"3.20.2";s:11:"description";s:469:"The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Media Carousel widget in all versions up to, and including, 3.20.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:5;O:8:"stdClass":5:{s:2:"id";s:36:"ed24ea21-967a-43e3-8219-daed594c6e11";s:5:"title";s:147:"Elementor Website Builder – More than Just a Page Builder < 3.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation";s:8:"fixed_in";s:6:"3.20.2";s:11:"description";s:500:"The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post Navigation widget in all versions up to, and including, 3.20.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:6;O:8:"stdClass":5:{s:2:"id";s:36:"249f4270-610c-4422-b34f-e714358fb398";s:5:"title";s:130:"Elementor Website Builder Pro < 3.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload";s:8:"fixed_in";s:6:"3.20.2";s:11:"description";s:585:"The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an SVGZ file uploaded via the Form widget in all versions up to, and including, 3.20.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability is only exploitable on web servers running NGINX. It is not exploitable on web servers running Apache HTTP Server.";s:13:"introduced_in";N;}i:7;O:8:"stdClass":5:{s:2:"id";s:36:"f54baf17-050d-4972-9631-3026dfb04496";s:5:"title";s:107:"Elementor Website Builder Pro < 3.21.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting";s:8:"fixed_in";s:6:"3.21.2";s:11:"description";s:461:"The Elementor Website Builder – More than Just a Page Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several parameters in versions up to, and including, 3.21.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:8;O:8:"stdClass":5:{s:2:"id";s:36:"b69f5b22-654f-459f-875d-ea6ba984b699";s:5:"title";s:55:"Elementor Pro < 3.21.3 - Reflected Cross-Site Scripting";s:8:"fixed_in";s:6:"3.21.3";s:11:"description";s:386:"The Elementor Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.21.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.";s:13:"introduced_in";N;}i:9;O:8:"stdClass":5:{s:2:"id";s:36:"771699f9-aa9b-4352-8382-5fbc17f364c2";s:5:"title";s:149:"Elementor Website Builder Pro – More than Just a Page Builder < 3.25.11 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode";s:8:"fixed_in";s:7:"3.25.11";s:11:"description";s:430:"The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.25.10 via the 'elementor-template' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the content of Private, Pending, and Draft Templates. The vulnerability was partially patched in version 3.24.4.";s:13:"introduced_in";N;}i:10;O:8:"stdClass":5:{s:2:"id";s:36:"e6f51ff0-a6de-4124-b753-a932f7f5e5f0";s:5:"title";s:81:"Elementor Pro < 3.29.1 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:6:"3.29.1";s:11:"description";s:435:"The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_text’ parameter in all versions up to, and including, 3.29.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:11;O:8:"stdClass":5:{s:2:"id";s:36:"fc8e4264-fa78-44d2-8b6d-6c4305cd2280";s:5:"title";s:60:"Elementor Website Builder < 3.29.1 - Contributor+ Stored XSS";s:8:"fixed_in";s:6:"3.29.1";s:11:"description";s:312:"The plugins are vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}}}s:31:"everest-forms/everest-forms.php";O:8:"stdClass":2:{s:7:"version";s:5:"2.0.6";s:15:"vulnerabilities";a:14:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"b5849147-396b-4538-95b7-db46bc7f385b";s:5:"title";s:80:"Everest Forms < 2.0.8 - Unauthenticated Server-Side Request Forgery via font_url";s:8:"fixed_in";s:5:"2.0.8";s:11:"description";s:432:"The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery via the 'font_url' parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
It is worth mentioning that while the fix prevents the attack, it broke the `Load Fonts Locally` functionality.";s:13:"introduced_in";N;}i:1;O:8:"stdClass":5:{s:2:"id";s:36:"e5f94dcf-a6dc-4c4c-acb6-1a7ead701053";s:5:"title";s:43:"Everest Forms < 3.0.3.1 - Admin+ Stored XSS";s:8:"fixed_in";s:7:"3.0.3.1";s:11:"description";s:250:"The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).";s:13:"introduced_in";N;}i:2;O:8:"stdClass":5:{s:2:"id";s:36:"85d590c9-c96d-40c9-aa59-48302ba3d63c";s:5:"title";s:43:"Everest Forms < 3.0.4.2 - Admin+ Stored XSS";s:8:"fixed_in";s:7:"3.0.4.2";s:11:"description";s:250:"The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).";s:13:"introduced_in";N;}i:3;O:8:"stdClass":5:{s:2:"id";s:36:"f60a8358-1765-4cae-9c89-0d75c5e394ec";s:5:"title";s:43:"Everest Forms < 3.0.8.1 - Admin+ Stored XSS";s:8:"fixed_in";s:7:"3.0.8.1";s:11:"description";s:250:"The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).";s:13:"introduced_in";N;}i:4;O:8:"stdClass":5:{s:2:"id";s:36:"26cdd6ec-06c0-4632-b7cc-fcb0406d37d4";s:5:"title";s:83:"Everest Forms < 3.0.9.5 - Unauthenticated Arbitrary File Upload, Read, and Deletion";s:8:"fixed_in";s:7:"3.0.9.5";s:11:"description";s:557:"The Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file upload, read, and deletion due to missing file type and path validation in the 'format' method of the EVF_Form_Fields_Upload class in all versions up to, and including, 3.0.9.4. This makes it possible for unauthenticated attackers to upload, read, and delete arbitrary files on the affected site's server which may make remote code execution, sensitive information disclosure, or a site takeover possible.";s:13:"introduced_in";N;}i:5;O:8:"stdClass":5:{s:2:"id";s:36:"6237f7d1-83ae-4bbc-aa81-95bbedc09a87";s:5:"title";s:81:"Everest Forms < 3.1.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution";s:8:"fixed_in";s:5:"3.1.2";s:11:"description";s:472:"The The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.";s:13:"introduced_in";N;}i:6;O:8:"stdClass":5:{s:2:"id";s:36:"83076aaa-30ab-467e-9ba8-5f88ed37c0cd";s:5:"title";s:54:"Everest Forms < 3.1.2 - Reflected Cross-Site Scripting";s:8:"fixed_in";s:5:"3.1.2";s:11:"description";s:497:"The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'form_id' parameter in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.";s:13:"introduced_in";N;}i:7;O:8:"stdClass":5:{s:2:"id";s:36:"b90d6420-0de1-42cd-aee2-2473a757a320";s:5:"title";s:60:"Everest Forms < 3.1.2 - Unauthenticated PHP Object Injection";s:8:"fixed_in";s:5:"3.1.2";s:11:"description";s:624:"The plugin is vulnerable to PHP Object Injection via deserialization of untrusted input from the 'field_value' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.";s:13:"introduced_in";N;}i:8;O:8:"stdClass":5:{s:2:"id";s:36:"62c5339e-1d3d-4ac5-aaa0-0a04580d18a1";s:5:"title";s:60:"Everest Forms < 3.2.3 - Unauthenticated PHP Object Injection";s:8:"fixed_in";s:5:"3.2.3";s:11:"description";s:412:"The plugin is vulnerable to PHP Object Injection via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.";s:13:"introduced_in";N;}i:9;O:8:"stdClass":5:{s:2:"id";s:36:"e104a9c8-122e-49da-9123-47f6d2c32b02";s:5:"title";s:84:"Everest Forms < 3.4.4 - Unauthenticated PHP Object Injection via Form Entry Metadata";s:8:"fixed_in";s:5:"3.4.4";s:11:"description";s:732:"The plugin is vulnerable to PHP Object Injection via deserialization of untrusted input from form entry metadata. This is due to the html-admin-page-entries-view.php file calling PHP's native unserialize() on stored entry meta values without passing the allowed_classes parameter. This makes it possible for unauthenticated attackers to inject a serialized PHP object payload through any public Everest Forms form field. The payload survives sanitize_text_field() sanitization (serialization control characters are not stripped) and is stored in the wp_evf_entrymeta database table. When an administrator views entries or views an individual entry, the unsafe unserialize() call processes the stored data without class restrictions.";s:13:"introduced_in";N;}i:10;O:8:"stdClass":5:{s:2:"id";s:36:"70ecc047-c3f6-4cb5-ba7b-961036555fa8";s:5:"title";s:111:"Everest Forms < 3.4.5 - Unauthenticated Arbitrary File Read and Deletion via Upload Field 'old_files' Parameter";s:8:"fixed_in";s:5:"3.4.5";s:11:"description";s:1066:"The plugin is vulnerable to Arbitrary File Read and Deletion due to the plugin trusting attacker-controlled old_files data from public form submissions as legitimate server-side upload state, and converting attacker-supplied URLs into local filesystem paths using regex-based string replacement without canonicalization or directory boundary enforcement. This makes it possible for unauthenticated attackers to read arbitrary local files (e.g., wp-config.php) by injecting path-traversal payloads into the old_files upload field parameter, which are then attached to notification emails. The same path resolution is also used in the post-email cleanup routine, which calls unlink() on the resolved path, resulting in the targeted file being deleted after being attached. This can lead to full site compromise through disclosure of database credentials and authentication salts from wp-config.php, and denial of service through deletion of critical files. Prerequisite: The form must contain a file-upload or image-upload field, and disable storing entry information.";s:13:"introduced_in";N;}i:11;O:8:"stdClass":5:{s:2:"id";s:36:"a8dd4d4c-405d-4365-8379-a0db1e27165c";s:5:"title";s:69:"Everest Forms < 3.4.2 - Unauthenticated Arbitrary Shortcode Execution";s:8:"fixed_in";s:5:"3.4.2";s:11:"description";s:420:"The The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.4.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.";s:13:"introduced_in";N;}i:12;O:8:"stdClass":5:{s:2:"id";s:36:"af559211-8c6b-4f31-ba74-c44ed334a313";s:5:"title";s:157:"Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder < 3.4.8 - Missing Authorization to Authenticated (Subscriber+) Email Sending";s:8:"fixed_in";s:5:"3.4.8";s:11:"description";s:414:"The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder plugin for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the send_test_email() function in all versions up to, and including, 3.4.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to send test emails to arbitrary addresses from the server.";s:13:"introduced_in";N;}i:13;O:8:"stdClass":5:{s:2:"id";s:36:"4bd381e9-2f4e-4e61-99af-88f50aed71f5";s:5:"title";s:97:"Everest Forms < 3.5.0 - Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts";s:8:"fixed_in";s:5:"3.5.0";s:11:"description";s:703:"The plugin does not reliably delete temporary CSV files generated during email-notification processing and leaves them publicly accessible in the uploads directory, allowing unauthenticated attackers to retrieve other users' form submission records via predictable, enumerable filenames.

Exploitation requires the Everest Forms Pro add-on to be active (the CSV email-attachment option is provided by Pro) and a form with more than one email notification where the CSV attachment is enabled on a notification that is not processed last. Form entry identifiers are sequential and are returned to the submitter in the submission response, which makes the retained artifacts straightforward to enumerate.";s:13:"introduced_in";N;}}}s:25:"gtranslate/gtranslate.php";O:8:"stdClass":2:{s:7:"version";s:5:"3.0.9";s:15:"vulnerabilities";a:0:{}}s:59:"intuitive-custom-post-order/intuitive-custom-post-order.php";O:8:"stdClass":2:{s:7:"version";s:5:"3.1.5";s:15:"vulnerabilities";a:0:{}}s:21:"jet-blog/jet-blog.php";O:8:"stdClass":2:{s:7:"version";s:5:"2.3.1";s:15:"vulnerabilities";a:6:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"ab13d4e1-c49b-4707-9cb7-ce0eee885662";s:5:"title";s:76:"JetBlog < 2.4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:7:"2.4.3.1";s:11:"description";s:372:"The JetBlog plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:1;O:8:"stdClass":5:{s:2:"id";s:36:"c27a120f-4833-4e9e-a2d0-fcce68e8aaf2";s:5:"title";s:41:"JetBlog < 2.4.3.1 - Missing Authorization";s:8:"fixed_in";s:7:"2.4.3.1";s:11:"description";s:264:"The JetBlog for Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.4.3. This makes it possible for unauthenticated attackers to perform an unauthorized action.";s:13:"introduced_in";N;}i:2;O:8:"stdClass":5:{s:2:"id";s:36:"f4063628-96e8-4465-b9f7-16b6a29a38dc";s:5:"title";s:74:"JetBlog < 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:5:"2.4.5";s:11:"description";s:374:"The JetBlog plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.4.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:3;O:8:"stdClass":5:{s:2:"id";s:36:"7dbe7206-06c4-4e54-9bd0-0a1b1bca8b9c";s:5:"title";s:50:"JetBlog < 2.4.4.1 - Reflected Cross-Site Scripting";s:8:"fixed_in";s:7:"2.4.4.1";s:11:"description";s:379:"The JetBlog plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.";s:13:"introduced_in";N;}i:4;O:8:"stdClass":5:{s:2:"id";s:36:"caa5212c-a13e-44ce-bf13-08ed90374ad7";s:5:"title";s:41:"JetBlog < 2.4.7.1 - Missing Authorization";s:8:"fixed_in";s:7:"2.4.7.1";s:11:"description";s:290:"The JetBlog plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.4.7. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action.";s:13:"introduced_in";N;}i:5;O:8:"stdClass":5:{s:2:"id";s:36:"b19002e8-0464-423f-8849-0f1b1d102d43";s:5:"title";s:56:"JetBlog < 2.4.8.1 - Unauthenticated Information Exposure";s:8:"fixed_in";s:7:"2.4.8.1";s:11:"description";s:227:"The JetBlog plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.8. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.";s:13:"introduced_in";N;}}}s:29:"jet-elements/jet-elements.php";O:8:"stdClass":2:{s:7:"version";s:5:"2.5.8";s:15:"vulnerabilities";a:12:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"cf9c4f4f-d7ba-41c5-b817-61f5879119f8";s:5:"title";s:109:"JetElements For Elementor < 2.6.13.1 - Missing Authorization to Unauthenticated Arbitrary Attachment Download";s:8:"fixed_in";s:8:"2.6.13.1";s:11:"description";s:272:"The JetElements plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on an unknown function in all versions up to, and including, 2.6.13. This makes it possible for unauthenticated attackers to download arbitrary attachments.";s:13:"introduced_in";N;}i:1;O:8:"stdClass":5:{s:2:"id";s:36:"b662edc4-80d7-4a4e-a4d3-31bc94257cf2";s:5:"title";s:84:"JetElements < 2.6.20.1 - Authenticated (Contributor+) Arbitrary Local File Inclusion";s:8:"fixed_in";s:8:"2.6.20.1";s:11:"description";s:533:"The JetElements plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.6.20 via the 'progress_type' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.";s:13:"introduced_in";N;}i:2;O:8:"stdClass":5:{s:2:"id";s:36:"c8adfc30-3ad4-4514-b50a-1c3f04a9299a";s:5:"title";s:81:"JetElements < 2.6.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:8:"2.6.20.1";s:11:"description";s:420:"The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and 'slide_id' parameters in all versions up to, and including, 2.6.20 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:3;O:8:"stdClass":5:{s:2:"id";s:36:"3e40c945-5ff3-4d3a-b690-3b2dc1a77c74";s:5:"title";s:100:"Jet Elements < 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets";s:8:"fixed_in";s:5:"2.7.3";s:11:"description";s:430:"The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.7.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:4;O:8:"stdClass":5:{s:2:"id";s:36:"2a88f784-7403-408f-9fc4-989c90113e22";s:5:"title";s:94:"JetElements For Elementor < 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:7:"2.7.4.2";s:11:"description";s:392:"The JetElements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.7.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:5;O:8:"stdClass":5:{s:2:"id";s:36:"2d32dbce-cd45-4f62-98e0-b5b8fcda1387";s:5:"title";s:59:"JetElements For Elementor < 2.7.4.2 - Missing Authorization";s:8:"fixed_in";s:7:"2.7.4.2";s:11:"description";s:256:"The JetElements plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.7.4.1. This makes it possible for unauthenticated attackers to perform an unauthorized action.";s:13:"introduced_in";N;}i:6;O:8:"stdClass":5:{s:2:"id";s:36:"8a4df39e-5ecd-4ea4-89e5-fa234d92b687";s:5:"title";s:88:"JetElements For Elementor < 2.7.7.1 - Authenticated (Subscriber+) Information Disclosure";s:8:"fixed_in";s:7:"2.7.7.1";s:11:"description";s:270:"The JetElements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive user or configuration data.";s:13:"introduced_in";N;}i:7;O:8:"stdClass":5:{s:2:"id";s:36:"faceb6b5-bdc3-4203-95de-e63198d76d67";s:5:"title";s:94:"JetElements For Elementor < 2.7.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:7:"2.7.7.1";s:11:"description";s:390:"The JetElements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.7.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:8;O:8:"stdClass":5:{s:2:"id";s:36:"a06d4374-783e-415b-a4b9-da1700244b7c";s:5:"title";s:94:"JetElements For Elementor < 2.7.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:7:"2.7.9.1";s:11:"description";s:390:"The JetElements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.7.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:9;O:8:"stdClass":5:{s:2:"id";s:36:"068cc6fe-4fef-4ac6-be09-4b3c9f781e4c";s:5:"title";s:94:"JetElements For Elementor < 2.7.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:7:"2.7.8.1";s:11:"description";s:390:"The JetElements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.7.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:10;O:8:"stdClass":5:{s:2:"id";s:36:"0db92961-f42d-4cc0-a7d0-7e82aaf73609";s:5:"title";s:95:"JetElements For Elementor < 2.7.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:8:"2.7.12.1";s:11:"description";s:391:"The JetElements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.7.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:11;O:8:"stdClass":5:{s:2:"id";s:36:"3c098742-5eb6-427a-89bc-88c2c6f5b8ce";s:5:"title";s:95:"JetElements For Elementor < 2.7.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:8:"2.7.12.3";s:11:"description";s:393:"The JetElements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.7.12.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}}}s:19:"jetpack/jetpack.php";O:8:"stdClass":2:{s:7:"version";s:6:"12.0.2";s:15:"vulnerabilities";a:8:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"52d221bd-ae42-435d-a90a-60a5ae530663";s:5:"title";s:62:"Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API";s:8:"fixed_in";s:6:"12.1.1";s:11:"description";s:228:"The plugin does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization.";s:13:"introduced_in";s:3:"1.9";}i:1;O:8:"stdClass":5:{s:2:"id";s:36:"4478c8d3-0c7f-43a0-9354-46795e0e6fbc";s:5:"title";s:64:"Jetpack < 12.8-a.3 - Contributor+ Stored XSS via block attribute";s:8:"fixed_in";s:8:"12.8-a.3";s:11:"description";s:241:"The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks";s:13:"introduced_in";N;}i:2;O:8:"stdClass":5:{s:2:"id";s:36:"cce4ac0a-777f-4dde-b86e-614a224dbf6e";s:5:"title";s:79:"Jetpack < 12.7 - Improper Authorization via WPCom External Media REST endpoints";s:8:"fixed_in";s:4:"12.7";s:11:"description";s:379:"The Jetpack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the WPCom External Media REST permission_callback function in versions up to and including 12.6.2. This makes it possible for authenticated attackers, with contributor-level access and above, to import external media even without the upload_files capability.";s:13:"introduced_in";N;}i:3;O:8:"stdClass":5:{s:2:"id";s:36:"01a0ffcd-3bf6-434c-9fd0-d5570ed4f336";s:5:"title";s:78:"Jetpack < 12.7 - Authenticated(Contributor+) Clickjacking via Iframe Injection";s:8:"fixed_in";s:4:"12.7";s:11:"description";s:436:"The Jetpack – WP Security, Backup, Speed, & Growth plugin for WordPress is vulnerable to Clickjacking via iframe injection due to an unknown parameter in all versions up to and including 12.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject iframes in pages that can be used to make users perform actions on untrusted sites.";s:13:"introduced_in";N;}i:4;O:8:"stdClass":5:{s:2:"id";s:36:"bfed3099-bd41-4988-a76b-2b9349051879";s:5:"title";s:42:"Jetpack < 13.2.1 - Contributor+ Stored XSS";s:8:"fixed_in";s:6:"13.2.1";s:11:"description";s:253:"The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks ";s:13:"introduced_in";N;}i:5;O:8:"stdClass":5:{s:2:"id";s:36:"5649d116-5263-41e9-87b4-1cb71f12d419";s:5:"title";s:79:"Jetpack < 13.4 - Contributor+ Stored Cross-Site Scripting via wpvideo Shortcode";s:8:"fixed_in";s:4:"13.4";s:11:"description";s:149:"The plugin did not properly escape some of its shortcode attributes, allowing users with at least the contributor role to conduct Stored XSS attacks.";s:13:"introduced_in";N;}i:6;O:8:"stdClass":5:{s:2:"id";s:36:"a984976c-291a-4f68-90d4-e452605ea7d1";s:5:"title";s:70:"Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution";s:8:"fixed_in";s:4:"13.8";s:11:"description";s:187:"The plugin does not ensure that the post created by the Contact Form is only accessible to authorised users, which could allow unauthenticated users to run arbitrary shortcodes and block.";s:13:"introduced_in";N;}i:7;O:8:"stdClass":5:{s:2:"id";s:36:"15f278f6-0418-4c83-b925-b1a2d8c53e2f";s:5:"title";s:55:"Jetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS";s:8:"fixed_in";s:4:"13.8";s:11:"description";s:263:"The plugins use regexes in the Site Accelerator features when switching image URLs to their CDN counterpart. Unfortunately, some of them may match patterns it shouldn’t, ultimately making it possible for contributor and above users to perform Stored XSS attacks";s:13:"introduced_in";N;}}}s:35:"jetpack-protect/jetpack-protect.php";O:8:"stdClass":2:{s:7:"version";s:5:"1.4.0";s:15:"vulnerabilities";a:0:{}}s:25:"jet-search/jet-search.php";O:8:"stdClass":2:{s:7:"version";s:5:"3.0.3";s:15:"vulnerabilities";a:7:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"1bfc0b63-d877-4705-afe6-5a6f32463b52";s:5:"title";s:78:"JetSearch < 3.5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:7:"3.5.2.1";s:11:"description";s:405:"The JetSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:1;O:8:"stdClass":5:{s:2:"id";s:36:"d2af90d3-e32a-4cab-861b-1ba02b3b2e7b";s:5:"title";s:78:"JetSearch < 3.5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:7:"3.5.7.1";s:11:"description";s:374:"The JetSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:2;O:8:"stdClass":5:{s:2:"id";s:36:"ac1e081e-6033-4d4a-bdf4-de677e975c0b";s:5:"title";s:77:"JetSearch < 3.5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:6:"3.5.11";s:11:"description";s:377:"The JetSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.5.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:3;O:8:"stdClass":5:{s:2:"id";s:36:"b84c580d-3db4-42ef-b42c-918039c4cc9b";s:5:"title";s:52:"JetSearch < 3.5.10.1 - Unauthenticated SQL Injection";s:8:"fixed_in";s:8:"3.5.10.1";s:11:"description";s:413:"The JetSearch plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.5.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.";s:13:"introduced_in";N;}i:4;O:8:"stdClass":5:{s:2:"id";s:36:"25de99f3-df53-4278-924b-1014ae949b23";s:5:"title";s:53:"JetSearch < 3.5.10.1 - Reflected Cross-Site Scripting";s:8:"fixed_in";s:8:"3.5.10.1";s:11:"description";s:382:"The JetSearch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.5.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.";s:13:"introduced_in";N;}i:5;O:8:"stdClass":5:{s:2:"id";s:36:"f0a13e06-bb08-4196-97ba-64cc4c116922";s:5:"title";s:79:"JetSearch < 3.5.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:8:"3.5.16.1";s:11:"description";s:375:"The JetSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.5.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:6;O:8:"stdClass":5:{s:2:"id";s:36:"f9ef13e5-0538-419a-a663-f02d02330eba";s:5:"title";s:52:"JetSearch < 3.5.17.1 - Unauthenticated SQL Injection";s:8:"fixed_in";s:8:"3.5.17.1";s:11:"description";s:413:"The JetSearch plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.5.17 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.";s:13:"introduced_in";N;}}}s:39:"jet-smart-filters/jet-smart-filters.php";O:8:"stdClass":2:{s:7:"version";s:5:"3.1.2";s:15:"vulnerabilities";a:4:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"af9bc3c2-9eae-416a-ab70-3c93bac8d231";s:5:"title";s:82:"JetSmartFilters < 3.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:5:"3.6.4";s:11:"description";s:380:"The JetSmartFilters plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:1;O:8:"stdClass":5:{s:2:"id";s:36:"20c43916-3f84-43fc-a86d-f9ce51399118";s:5:"title";s:84:"JetSmartFilters < 3.6.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting";s:8:"fixed_in";s:7:"3.6.8.1";s:11:"description";s:380:"The JetSmartFilters plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.6.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:2;O:8:"stdClass":5:{s:2:"id";s:36:"dac91895-50ab-4778-83ed-6672960df866";s:5:"title";s:86:"JetSmartFilters < 3.6.7.1 - Authenticated (Subscriber+) Sensitive Information Exposure";s:8:"fixed_in";s:7:"3.6.7.1";s:11:"description";s:274:"The JetSmartFilters plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive user or configuration data.";s:13:"introduced_in";N;}i:3;O:8:"stdClass":5:{s:2:"id";s:36:"b4eba781-6da7-4aa7-963a-64b906620c33";s:5:"title";s:57:"JetSmartFilters < 3.8.1.1 - Unauthenticated SQL Injection";s:8:"fixed_in";s:7:"3.8.1.1";s:11:"description";s:418:"The JetSmartFilters plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.";s:13:"introduced_in";N;}}}s:21:"newsletter/plugin.php";O:8:"stdClass":2:{s:7:"version";s:5:"8.0.9";s:15:"vulnerabilities";a:8:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"67d1e680-6a32-4718-b0d5-a76e6421a7b8";s:5:"title";s:32:"Newsletter < 8.2.1 - IP Spoofing";s:8:"fixed_in";s:5:"8.2.1";s:11:"description";s:303:"The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 8.2.0 due to insufficient IP address validation. This makes it possible for unauthenticated attackers to spoof their IP address and bypass the blocklist.";s:13:"introduced_in";N;}i:1;O:8:"stdClass":5:{s:2:"id";s:36:"eebdf720-ca0f-4d1b-95c8-4fee33cd1590";s:5:"title";s:72:"Newsletter < 8.3.5 - Unauthenticated Stored Cross-Site Scripting via np1";s:8:"fixed_in";s:5:"8.3.5";s:11:"description";s:363:"The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'np1' parameter in all versions up to, and including, 8.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.";s:13:"introduced_in";N;}i:2;O:8:"stdClass":5:{s:2:"id";s:36:"a6582e14-e21e-48e7-9b4c-0044fb199825";s:5:"title";s:38:"Newsletter < 8.7.1 - Admin+ Stored XSS";s:8:"fixed_in";s:5:"8.7.1";s:11:"description";s:250:"The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).";s:13:"introduced_in";N;}i:3;O:8:"stdClass":5:{s:2:"id";s:36:"76937bdd-7ffa-4b5e-ade1-60da095a03a3";s:5:"title";s:55:"Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription";s:8:"fixed_in";s:5:"8.8.2";s:11:"description";s:263:"The plugin does not sanitise and escape some of its Subscription settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).";s:13:"introduced_in";N;}i:4;O:8:"stdClass":5:{s:2:"id";s:36:"19db8521-8dff-48c5-b21a-1001895292e0";s:5:"title";s:47:"Newsletter < 8.8.5 - Admin+ Stored XSS via Form";s:8:"fixed_in";s:5:"8.8.5";s:11:"description";s:255:"The plugin does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).";s:13:"introduced_in";N;}i:5;O:8:"stdClass":5:{s:2:"id";s:36:"2d96f018-510d-40ab-9e73-76fa44784813";s:5:"title";s:49:"Newsletter < 8.8.5 - Admin+ Stored XSS via Widget";s:8:"fixed_in";s:5:"8.8.5";s:11:"description";s:324:"The plugin does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).";s:13:"introduced_in";N;}i:6;O:8:"stdClass":5:{s:2:"id";s:36:"70c91b87-9d62-4a72-aa20-949e427b556e";s:5:"title";s:65:"Newsletter < 9.1.0 - Authenticated (Administrator+) SQL Injection";s:8:"fixed_in";s:5:"9.1.0";s:11:"description";s:455:"The Newsletter plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 9.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.";s:13:"introduced_in";N;}i:7;O:8:"stdClass":5:{s:2:"id";s:36:"00921c88-818c-49f2-a291-39a73b46157e";s:5:"title";s:115:"Newsletter – Send awesome emails from WordPress < 9.1.1 - Cross-Site Request Forgery to Newsletter Unsubscription";s:8:"fixed_in";s:5:"9.1.1";s:11:"description";s:464:"The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.1.0. This is due to missing or incorrect nonce validation on the hook_newsletter_action() function. This makes it possible for unauthenticated attackers to unsubscribe newsletter subscribers via a forged request granted they can trick a logged-in user into performing an action such as clicking on a link.";s:13:"introduced_in";N;}}}s:51:"ocean-elementor-widgets/ocean-elementor-widgets.php";O:8:"stdClass":2:{s:7:"version";s:5:"1.2.3";s:15:"vulnerabilities";a:0:{}}s:13:"pods/init.php";O:8:"stdClass":2:{s:7:"version";s:7:"3.2.8.2";s:15:"vulnerabilities";a:0:{}}s:41:"post-views-counter/post-views-counter.php";O:8:"stdClass":2:{s:7:"version";s:5:"1.4.3";s:15:"vulnerabilities";a:1:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"f999eaa3-d447-4cba-a1b4-2dc2eab4c094";s:5:"title";s:82:"Post Views Counter < 1.4.5 - Cross-Site Request Forgery via save_bulk_post_views()";s:8:"fixed_in";s:5:"1.4.5";s:11:"description";s:384:"The plugin is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.4. This is due to missing or incorrect nonce validation on the save_bulk_post_views() function. This makes it possible for unauthenticated attackers to save bulk post views via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.";s:13:"introduced_in";N;}}}s:51:"wordpress-popular-posts/wordpress-popular-posts.php";O:8:"stdClass":2:{s:7:"version";s:5:"6.4.0";s:15:"vulnerabilities";a:1:{i:0;O:8:"stdClass":5:{s:2:"id";s:36:"957a0dc2-56e1-4789-bc56-716fab1cbce4";s:5:"title";s:79:"WordPress Popular Posts < 7.2.0 - Unauthenticated Arbitrary Shortcode Execution";s:8:"fixed_in";s:5:"7.2.0";s:11:"description";s:268:"The plugin is vulnerable to arbitrary shortcode execution due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.";s:13:"introduced_in";N;}}}}}";