An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code ...

Axis Communications AB AXIS OS

Age Restriction <= 3.0.2 - Subscriber+ Privilege Escalation

Unknown age-restriction

WP Google Maps < 9.0.48 - Unauthenticated Stored XSS

Unknown WP Go Maps (formerly WP Google Maps)

Make Email Customizer for WooCommerce <= 1.0.6 - Subscriber+ Arbitrary Options Update

Unknown Make Email Customizer for WooCommerce

GitHub Gist Shortcode Plugin <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

paul1999 GitHub Gist Shortcode Plugin

Live Photos on WordPress <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

eggemplo Live Photos on WordPress

Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting

mervinpraison Featured Image

Astra Security Suite – Firewall & Malware Scan <= 0.2 - Unauthenticated Arbitrary File Upload

astrasecuritysuite Astra Security Suite – Firewall & Malware Scan

Add Multiple Marker <= 1.2 - Missing Authorization to Unauthenticated Settings Update

krishaweb Add Multiple Marker

Coon Google Maps <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

andrico Coon Google Maps

Include fussball.de Widgets <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'api' and 'type'

mheob Include Fussball.de Widgets

Crypto Tool <= 2.22 - Unauthenticated Information Exposure via Global Authentication State

odude Crypto Tool

The Total Book Project <= 1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Book Manipulation

ryanmoyer The Total Book Project

Elastic Theme Editor <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload

koopersmith Elastic Theme Editor

Simple Donate <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

ethoseo Simple Donate

Jeba Cute forkit <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

jahed Jeba Cute forkit

Twitter Feed <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

caselock Twitter Feed

Woocommerce – Products By Custom Tax <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

elvismdev Woocommerce – Products By Custom Tax

WP Count Down Timer <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

sitedin WP Count Down Timer

Preload Current Images <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

mmdeveloper Preload Current Images