| 2021-06-09 | WordPress Visitors-App 0.3 Cross Site Scripting | Published |
| 2021-06-08 | WordPress wpDiscuz 7.0.4 Remote Code Execution | Published |
| 2021-06-07 | Wordpress Plugin wpDiscuz 7.0.4 - Arbitrary File Upload Unauthenticated | Published |
| 2021-06-01 | WordPress WP Prayer 1.6.1 Cross Site Scripting | Published |
| 2021-05-28 | WordPress LifterLMS 4.21.0 Cross Site Scripting | Published |
| 2021-05-25 | WordPress WP Statistics 13.0.7 SQL Injection | Published |
| 2021-05-25 | WordPress ReDi Restaurant Reservation 21.0307 Cross Site Scripting | Published |
| 2021-05-25 | WordPress Cookie Law Bar 1.2.1 Cross Site Scripting | Published |
| 2021-05-23 | WordPress Plugin Stop Spammers 2021.8 log Reflected Cross-site Scripting XSS | Published |
| 2021-05-17 | Goto WordPress Theme 2.0 - Unauthenticated Blind SQL Injection | Published |
| 2021-05-17 | Mediumish WordPress Theme < = 1.0.47 - Unauthenticated Reflected XSS & XFS | Published |
| 2021-05-17 | Listeo WordPress Theme < = 1.6.10 - Multiple XSS & XFS vulnerabilities | Published |
| 2021-05-17 | Bello WordPress Theme < = 1.5.9 - Unauthenticated Reflected XSS & XFS | Published |
| 2021-05-17 | WP-DB-Backup WordPress Plugin < = 2.3.3 - Authenticated Persistent XSS | Published |
| 2021-05-17 | Listeo WordPress Theme < = 1.6.10 - Multiple Authenticated IDOR Vulnerabilities | Published |
| 2021-05-17 | GiveWP WordPress Plugin < = 2.10.3 - Authenticated Persistent XSS | Published |
| 2021-05-17 | Bello WordPress Theme < = 1.5.9 - Authenticated XFS | Published |
| 2021-05-17 | Bello WordPress Theme < = 1.5.9 - Unauthenticated Blind SQL Injection | Published |
| 2021-05-17 | GA Google Analytics WordPress Plugin < = 20210211 - Multiple Authenticated Persistent XSS | Published |
| 2021-05-06 | WordPress WP Super Edit 2.5.4 Arbitrary File Upload | Published |
| 2021-04-28 | WordPress Plugin WPGraphQL 1.3.5 Denial of Service | Published |
| 2021-04-27 | WordPress Plugin RSS for Yandex Turbo 1.29 - Stored Cross-Site Scripting XSS | Published |
| 2021-04-27 | WordPress WPGraphQL 1.3.5 Denial Of Service | Published |
| 2021-04-23 | WordPress Plugin RSS for Yandex Turbo 1.29 Stored Cross-Site Scripting XSS | Published |
| 2021-04-21 | WordPress RSS For Yandex Turbo 1.29 Cross Site Scripting | Published |
| 2021-04-12 | Wordpress Websites Remote File Upload Exploit | Published |
| 2021-04-02 | Realteo WordPress Plugin < = 1.2.3 - Improper Access Control | Published |
| 2021-04-02 | Realteo WordPress Plugin < = 1.2.3 - Unauthenticated Reflected XSS | Published |
| 2021-04-01 | Goto WordPress Theme < = 1.9 - Unauthenticated Reflected XSS | Published |
| 2021-03-24 | WordPress GiveWP 2.9.7 Cross Site Scripting | Published |
| 2021-03-23 | Controlled Admin Access WordPress Plugin < = 1.4.0 - Improper Access Control & Privilege Esca | Published |
| 2021-03-22 | WordPress Delightful Downloads Jquery File Tree 1.6.6 Path Traversal | Published |
| 2021-03-19 | WP Super Cache WordPress Plugin < = 1.7.1 - Authenticated RCE / XSS -> RCE | Published |
| 2021-02-24 | WordPress Plugin Supsystic Data Tables Generator 1.9.96 Multiple Vulnerabilities | Published |
| 2021-02-24 | WordPress Plugin SuperForms 4.9 - Arbitrary File Upload to Remote Code | Published |
| 2021-02-21 | WordPress Plugin Supsystic Ultimate Maps 1.1.12 sidx SQL injection | Published |
| 2021-02-18 | WordPress Plugin Supsystic Digital Publications 1.6.9 Multiple Vulnerabilities | Published |
| 2021-02-13 | WordPress Plugin Supsystic Contact Form 1.7.5 Multiple Vulnerabilities | Published |
| 2021-02-08 | WordPress Supsystic Data Tables Generator 1.9.96 XSS / SQL Injection | Published |