Tipsandtricks-hq vulnerabilities

Products

• Wp Affiliate Platform 11
• All In One Wp Security \& Firewall 10
• Wp Emember 10
• Simple Download Monitor 9
• Wp Estore 8
• Wordpress Simple Paypal Shopping Cart 7
• Compact Wp Audio Player 4
• Accept Stripe 3
• Category Specific Rss Feed Subscription 3
• Software License Manager 3
• Wp Video Lightbox 3

Newest

• mra13 simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-3890 6.4 MediumMay 1, 2025
• mra13 simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity' CVE-2025-3889 5.3 MediumMay 1, 2025
• mra13 simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference CVE-2025-3874 6.5 MediumMay 1, 2025
• mra13 compact wp audio player Compact WP Audio Player <= 1.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_embed_player Shortcode CVE-2024-10176 6.4 MediumOctober 24, 2024
• tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products, wp easycart shopping cart and ecommerce store +2 more WP eStore < 8.5.6 - Reflected XSS in Product Editing CVE-2024-6134 5.4 MediumAugust 10, 2024
• tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 more WP eStore < 8.5.6 - Settings Reset via CSRF CVE-2024-6136 5.4 MediumAugust 9, 2024
• tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 more WP eStore < 8.5.6 - Reflected XSS in Customer Search CVE-2024-6133 6.5 MediumAugust 9, 2024
• mra13 accept stripe payments, tipsandtricks-hq accept stripe +1 more Accept Stripe Payments <= 2.0.86 - Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode CVE-2024-7353 5.4 MediumAugust 7, 2024
• tipsandtricks-hq wp emember, unknown wp-emember, wp emember emember +2 more WP eMember <= v10.7.0 - Stored XSS via CSRF CVE-2024-5081 6.1 MediumAugust 5, 2024
• slicewp wp-affiliate-platform, tipsandtricks-hq wp affiliate platform +1 more WP Affiliate Platform < 6.5.2 - Affiliate Deletion via CSRF CVE-2024-5285 5.5 MediumJuly 29, 2024
• tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 more WP eStore < 8.5.5 - Reflected XSS in Category Editing CVE-2024-6076 6.1 MediumJuly 15, 2024
• tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products, wp easycart shopping cart and ecommerce store +2 more WP eStore < 8.5.5 - Coupon Deletion via CSRF CVE-2024-6075 8.8 HighJuly 15, 2024
• tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products, wp easycart shopping cart and ecommerce store +2 more WP eStore < 8.5.5 - Reflected XSS in Customer Editing CVE-2024-6074 6.1 MediumJuly 15, 2024
• tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 more WP eStore < 8.5.5 - Reflected XSS in Discount Editing CVE-2024-6073 6.1 MediumJuly 15, 2024
• tipsandtricks-hq wp estore, unknown wp-cart-for-digital-products +1 more WP eStore < 8.5.5 - Reflected XSS via $_SERVER['REQUEST_URI'] CVE-2024-6072 6.1 MediumJuly 15, 2024
• tips and tricks hq wp emember, unknown wp-emember +1 more WP eMember < 10.6.7 - Reflected XSS CVE-2024-5744 6.8 MediumJuly 13, 2024
• tipsandtricks-hq wp emember, unknown wp-emember +1 more WP eMember < 10.6.7 - Reflected XSS via Member Edit CVE-2024-5715 7.1 HighJuly 13, 2024
• tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 more WP Affiliate Platform < 6.5.1 - Profile Update via CSRF CVE-2024-5287 7.1 HighJuly 13, 2024
• tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, affiliatewp +2 more WP Affiliate Platform < 6.5.1 - Reflected XSS via Banner Editing CVE-2024-5286 4.8 MediumJuly 13, 2024
• tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 more WP Affiliate Platform < 6.5.1 - Stored XSS via CSRF CVE-2024-5284 6.8 MediumJuly 13, 2024
• tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 more WP Affiliate Platform < 6.5.1 - Reflected XSS via Lead Editing CVE-2024-5283 6.1 MediumJuly 13, 2024
• tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 more WP Affiliate Platform < 6.5.1 - Reflected XSS via Registration Form CVE-2024-5282 6.1 MediumJuly 13, 2024
• tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 more WP Affiliate Platform < 6.5.1 - Reflected XSS via Affiliate Editing CVE-2024-5281 6.1 MediumJuly 13, 2024
• tipsandtricks-hq wp affiliate platform, unknown wp-affiliate-platform, wp affiliate platform project affiliate platform +2 more WP Affiliate Platform < 6.5.1 - POST Reflected XSS CVE-2024-5280 4.7 MediumJuly 13, 2024
• tipsandtricks-hq wp emember, unknown wp-emember +1 more WP eMember < 10.6.6 - Admin+ Arbitrary File Upload CVE-2024-5080 8.8 HighJuly 13, 2024
• tipsandtricks-hq wp emember, unknown wp-emember, wpemember +2 more WP eMember < 10.6.7 - Unauthenticated Stored XSS via Member Registration CVE-2024-5079 6.1 MediumJuly 13, 2024
• tips and tricks hq wp emember, unknown wp-emember +1 more WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF CVE-2024-5077 6.8 MediumJuly 13, 2024
• tipsandtricks-hq wp emember, unknown wp-emember +1 more WP eMember < 10.6.6 - Bulk Delete via CSRF CVE-2024-5076 8.8 HighJuly 13, 2024
• tipsandtricks-hq wp emember, unknown wp-emember +1 more WP eMember < 10.6.6 - Reflected XSS CVE-2024-5075 5.9 MediumJuly 13, 2024
• tipsandtricks-hq wp emember, unknown wp-emember +1 more WP eMember < 10.6.6 - Reflected XSS CVE-2024-5074 5.4 MediumJuly 13, 2024
• tips and tricks hq stripe payments, tipsandtricks-hq accept stripe +1 more WordPress Accept Stripe Payments plugin <= 2.0.79 - Content Injection vulnerability CVE-2023-48285 5.3 MediumJune 4, 2024
• tipsandtricks-hq wp emember, unknown wp-emember +1 more WP eMember < 10.3.9 - Reflected XSS CVE-2024-4749 8.3 HighJune 4, 2024
• mra13 simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting CVE-2023-6497 4.4 MediumJanuary 27, 2024
• code-projects simple photo gallery WordPress Simple Photo Gallery Plugin <= v1.8.1 is vulnerable to SQL Injection CVE-2022-47588 6.7 MediumNovember 3, 2023
• tips and tricks hq, ruhul amin category specific rss feed subscription WordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-22685 5.9 MediumMay 12, 2023
• tips and tricks hq, ruhul amin category specific rss feed subscription WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-22691 4.3 MediumMay 3, 2023
• tipsandtricks-hq wp express checkout, mra13 wp express checkout (accept paypal payments easily) +1 more The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... CVE-2023-1469 4.4 MediumMarch 17, 2023
• mra13 wordpress simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure... CVE-2023-1431 5.3 MediumMarch 16, 2023
• tipsandtricks-hq easy accept payments for paypal Easy Accept Payments for PayPal < 4.9.10 - Contributor+ Stored XSS CVE-2023-0275 5.4 MediumFebruary 13, 2023
• tips and tricks hq compact wp audio player Compact WP Audio Player < 1.9.8 - Contributor+ Stored XSS CVE-2022-4542 5.4 MediumJanuary 23, 2023
• mra13 wordpress simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more WordPress Simple Shopping Cart < 4.6.2 - Contributor+ Stored XSS via Shortcode CVE-2022-4672 5.4 MediumJanuary 23, 2023
• tipsandtricks-hq wp video lightbox WP Video Lightbox < 1.9.7 - Contributor+ Stored XSS CVE-2022-4465 5.4 MediumJanuary 16, 2023
• tipsandtricks-hq wp affiliate platform WP Affiliate Platform <= 6.3.9 - Cross-Site Request Forgery CVE-2022-3898 8.8 HighNovember 29, 2022
• tipsandtricks-hq wp affiliate platform WP Affiliate Platform <= 6.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2022-3897 5.5 MediumNovember 29, 2022
• tipsandtricks-hq wp affiliate platform WP Affiliate Platform <= 6.3.9 - Reflected Cross-Site Scripting CVE-2022-3896 6.1 MediumNovember 29, 2022
• tipsandtricks-hq donations via paypal Donations via PayPal < 1.9.9 - Admin+ Stored XSS CVE-2022-3822 4.8 MediumNovember 28, 2022
• all in one wp security & firewall team all-in-one security (aios) – security and firewall (wordpress plugin), tipsandtricks-hq all in one wp security \& firewall +1 more WordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities CVE-2022-44737 6.5 MediumNovember 22, 2022
• tipsandtricks-hq wp video lightbox WP Video Lightbox < 1.9.5 - Reflected Cross-Site Scripting CVE-2022-2189 6.1 MediumJuly 25, 2022
• tipsandtricks-hq accept stripe, unknown accept stripe payments +1 more Accept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scripting CVE-2022-2194 4.8 MediumJuly 17, 2022
• tipsandtricks-hq wp simple adsense insertion WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF CVE-2022-1695 4.3 MediumJune 6, 2022
• Show olderLoading…