Lana Codes

f(x) TOC <= 1.1.0 - Contributor+ Stored XSS

ActiveCampaign < 8.1.12 - Contributor+ Stored XSS

The Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions starting from 1.0.7 up to, and including, 1.1.1. This is due to missing nonce validation in the 'createTempAccountLink' function. This makes it possible fo

The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteUser' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated att

The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getListOfUsers' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticat

Newsletter Popup <= 1.2 - Unauthenticated Stored XSS

Newsletter Popup <= 1.2 - Record Deletion via CSRF

OSM – OpenStreetMap <= 6.01 - Contributor+ Stored XSS via Shortcode

WP Multi Store Locator <= 2.4 - Contributor+ Stored XSS

File Away <= 3.9.9.0.1 - Contributor+ Stored XSS via Shortcode