ugins\\/mail_082287dbf7a24d415ff71581fc248330.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_082287dbf7a24d415ff71581fc248330.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/awesome-filterable-portfolio\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/awesome-filterable-portfolio\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8311\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8311\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:559;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9462\";s:4:\"slug\";s:28:\"awesome-filterable-portfolio\";s:19:\"versionEndExcluding\";s:3:\"1.9\";s:11:\"description\";s:134:\"The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat_id parameter.\";s:4:\"refs\";s:647:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_082287dbf7a24d415ff71581fc248330.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_082287dbf7a24d415ff71581fc248330.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/awesome-filterable-portfolio\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/awesome-filterable-portfolio\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8311\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8311\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:560;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10918\";s:4:\"slug\";s:20:\"gallery-by-supsystic\";s:19:\"versionEndExcluding\";s:5:\"1.8.6\";s:11:\"description\";s:68:\"The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.\";s:4:\"refs\";s:223:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/gallery-by-supsystic\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/gallery-by-supsystic\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:561;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10918\";s:4:\"slug\";s:20:\"gallery-by-supsystic\";s:19:\"versionEndExcluding\";s:5:\"1.8.6\";s:11:\"description\";s:68:\"The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.\";s:4:\"refs\";s:223:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/gallery-by-supsystic\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/gallery-by-supsystic\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:562;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10935\";s:4:\"slug\";s:20:\"woocommerce-exporter\";s:19:\"versionEndExcluding\";s:5:\"1.8.4\";s:11:\"description\";s:84:\"The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation.\";s:4:\"refs\";s:200:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-exporter\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-exporter\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:563;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10935\";s:4:\"slug\";s:20:\"woocommerce-exporter\";s:19:\"versionEndExcluding\";s:5:\"1.8.4\";s:11:\"description\";s:84:\"The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation.\";s:4:\"refs\";s:200:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-exporter\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-exporter\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:564;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-7107\";s:4:\"slug\";s:13:\"ultimate-faqs\";s:19:\"versionEndExcluding\";s:6:\"1.8.30\";s:11:\"description\";s:109:\"The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php.\";s:4:\"refs\";s:449:\"[{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2222959\\/ultimate-faqs\\/tags\\/1.8.30\\/Shortcodes\\/DisplayFAQs.php\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2222959\\/ultimate-faqs\\/tags\\/1.8.30\\/Shortcodes\\/DisplayFAQs.php\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-faqs\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-faqs\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:565;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18531\";s:4:\"slug\";s:9:\"raygun4wp\";s:19:\"versionEndExcluding\";s:5:\"1.8.3\";s:11:\"description\";s:110:\"The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288.\";s:4:\"refs\";s:178:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/raygun4wp\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/raygun4wp\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:566;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-20633\";s:4:\"slug\";s:15:\"cookie-law-info\";s:19:\"versionEndExcluding\";s:5:\"1.8.3\";s:11:\"description\";s:236:\"ajax_policy_generator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent (cookie-law-info) 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation.\";s:4:\"refs\";s:229:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/wordpress-gdpr-cookie-consent-plugin-fixed-vulnerability\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/wordpress-gdpr-cookie-consent-plugin-fixed-vulnerability\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:567;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2016-4825\";s:4:\"slug\";s:25:\"Collne Welcart e-Commerce\";s:19:\"versionEndExcluding\";s:5:\"1.8.3\";s:11:\"description\";s:187:\"The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted serialized data.\";s:4:\"refs\";s:433:\"[{\"url\":\"http:\\/\\/jvn.jp\\/en\\/jp\\/JVN47363774\\/index.html\",\"name\":\"JVN#47363774\",\"refsource\":\"JVN\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http:\\/\\/jvndb.jvn.jp\\/jvndb\\/JVNDB-2016-000115\",\"name\":\"JVNDB-2016-000115\",\"refsource\":\"JVNDB\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http:\\/\\/www.welcart.com\\/community\\/archives\\/78977\",\"name\":\"http:\\/\\/www.welcart.com\\/community\\/archives\\/78977\",\"refsource\":\"CONFIRM\",\"tags\":[\"Vendor Advisory\"]}]\";}i:568;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2016-4828\";s:4:\"slug\";s:25:\"Collne Welcart e-Commerce\";s:19:\"versionEndExcluding\";s:5:\"1.8.3\";s:11:\"description\";s:205:\"The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by leveraging knowledge of the e-mail address associated with an account.\";s:4:\"refs\";s:433:\"[{\"url\":\"http:\\/\\/jvn.jp\\/en\\/jp\\/JVN61578437\\/index.html\",\"name\":\"JVN#61578437\",\"refsource\":\"JVN\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http:\\/\\/jvndb.jvn.jp\\/jvndb\\/JVNDB-2016-000118\",\"name\":\"JVNDB-2016-000118\",\"refsource\":\"JVNDB\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http:\\/\\/www.welcart.com\\/community\\/archives\\/78977\",\"name\":\"http:\\/\\/www.welcart.com\\/community\\/archives\\/78977\",\"refsource\":\"CONFIRM\",\"tags\":[\"Vendor Advisory\"]}]\";}i:569;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-17233\";s:4:\"slug\";s:13:\"ultimate-faqs\";s:19:\"versionEndExcluding\";s:6:\"1.8.25\";s:11:\"description\";s:117:\"Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection.\";s:4:\"refs\";s:660:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/unauthenticated-options-import-vulnerability-in-wordpress-ultimate-faq-plugin\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/unauthenticated-options-import-vulnerability-in-wordpress-ultimate-faq-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-faqs\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-faqs\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9883\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9883\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:570;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15643\";s:4:\"slug\";s:13:\"ultimate-faqs\";s:19:\"versionEndExcluding\";s:6:\"1.8.22\";s:11:\"description\";s:61:\"The ultimate-faqs plugin before 1.8.22 for WordPress has XSS.\";s:4:\"refs\";s:348:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-faqs\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-faqs\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9833\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9833\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:571;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9361\";s:4:\"slug\";s:13:\"Related Posts\";s:19:\"versionEndExcluding\";s:5:\"1.8.2\";s:11:\"description\";s:103:\"The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().\";s:4:\"refs\";s:503:\"[{\"url\":\"https:\\/\\/blog.sucuri.net\\/2015\\/04\\/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html\",\"name\":\"https:\\/\\/blog.sucuri.net\\/2015\\/04\\/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.barrykooij.com\\/several-security-updates-released\\/\",\"name\":\"https:\\/\\/www.barrykooij.com\\/several-security-updates-released\\/\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:572;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-9393\";s:4:\"slug\";s:26:\"pricing-table-by-supsystic\";s:19:\"versionEndExcluding\";s:5:\"1.8.2\";s:11:\"description\";s:107:\"An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS.\";s:4:\"refs\";s:197:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/pricing-table-by-supsystic\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/pricing-table-by-supsystic\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:573;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-9394\";s:4:\"slug\";s:26:\"pricing-table-by-supsystic\";s:19:\"versionEndExcluding\";s:5:\"1.8.2\";s:11:\"description\";s:108:\"An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF.\";s:4:\"refs\";s:197:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/pricing-table-by-supsystic\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/pricing-table-by-supsystic\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:574;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-20182\";s:4:\"slug\";s:10:\"foogallery\";s:19:\"versionEndExcluding\";s:6:\"1.8.18\";s:11:\"description\";s:82:\"The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.\";s:4:\"refs\";s:337:\"[{\"url\":\"https:\\/\\/medium.com\\/@Pablo0xSantiago\\/cve-2019-20182-foogallery-image-gallery-wordpress-plugin-1-8-12-stored-cross-site-scripting-d5864f1259f\",\"name\":\"https:\\/\\/medium.com\\/@Pablo0xSantiago\\/cve-2019-20182-foogallery-image-gallery-wordpress-plugin-1-8-12-stored-cross-site-scripting-d5864f1259f\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:575;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16524\";s:4:\"slug\";s:13:\"easy-fancybox\";s:19:\"versionEndExcluding\";s:6:\"1.8.18\";s:11:\"description\";s:281:\"The easy-fancybox plugin before 1.8.18 for WordPress (aka Easy FancyBox) is susceptible to Stored XSS in the Settings Menu inc/class-easyfancybox.php due to improper encoding of arbitrarily submitted settings parameters. This occurs because there is no inline styles output filter.\";s:4:\"refs\";s:702:\"[{\"url\":\"https:\\/\\/github.com\\/sbaresearch\\/advisories\\/tree\\/public\\/2019\\/SBA-ADV-20190911-01_Easy_FancyBox_WP_Plugin_Stored_XSS\",\"name\":\"https:\\/\\/github.com\\/sbaresearch\\/advisories\\/tree\\/public\\/2019\\/SBA-ADV-20190911-01_Easy_FancyBox_WP_Plugin_Stored_XSS\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/easy-fancybox\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/easy-fancybox\\/#developers\",\"refsource\":\"CONFIRM\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9891\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9891\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:576;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:47:\"yith-color-and-label-variations-for-woocommerce\";s:19:\"versionEndExcluding\";s:6:\"1.8.13\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:577;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-17574\";s:4:\"slug\";s:11:\"popup-maker\";s:19:\"versionEndExcluding\";s:6:\"1.8.13\";s:11:\"description\";s:328:\"An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the do_action function to invoke certain popmake_ or pum_ methods, as demonstrated by controlling content and delivery of popmake-system-info.txt (aka the \"support debug text file\").\";s:4:\"refs\";s:570:\"[{\"url\":\"http:\\/\\/blog.redyops.com\\/wordpress-plugin-popup-maker\\/\",\"name\":\"http:\\/\\/blog.redyops.com\\/wordpress-plugin-popup-maker\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/github.com\\/PopupMaker\\/Popup-Maker\\/blob\\/master\\/CHANGELOG.md\",\"name\":\"https:\\/\\/github.com\\/PopupMaker\\/Popup-Maker\\/blob\\/master\\/CHANGELOG.md\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9907\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9907\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:578;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18596\";s:4:\"slug\";s:9:\"elementor\";s:19:\"versionEndExcluding\";s:5:\"1.8.0\";s:11:\"description\";s:100:\"The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.\";s:4:\"refs\";s:340:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/elementor\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/elementor\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8965\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8965\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:579;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-14313\";s:4:\"slug\";s:66:\"shibboleth_login_form function in shibboleth.php in the Shibboleth\";s:19:\"versionEndExcluding\";s:3:\"1.8\";s:11:\"description\";s:175:\"The shibboleth_login_form function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of add_query_arg().\";s:4:\"refs\";s:723:\"[{\"url\":\"http:\\/\\/www.debian.org\\/security\\/2017\\/dsa-3973\",\"name\":\"DSA-3973\",\"refsource\":\"DEBIAN\",\"tags\":[]},{\"url\":\"https:\\/\\/bugs.debian.org\\/874416\",\"name\":\"https:\\/\\/bugs.debian.org\\/874416\",\"refsource\":\"CONFIRM\",\"tags\":[\"Mailing List\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/github.com\\/michaelryanmcneill\\/shibboleth\\/commit\\/1d65ad6786282d23ba1865f56e2fd19188e7c26a\",\"name\":\"https:\\/\\/github.com\\/michaelryanmcneill\\/shibboleth\\/commit\\/1d65ad6786282d23ba1865f56e2fd19188e7c26a\",\"refsource\":\"CONFIRM\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8901\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8901\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:580;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-10309\";s:4:\"slug\";s:25:\"Responsive Cookie Consent\";s:19:\"versionEndExcluding\";s:3:\"1.8\";s:11:\"description\";s:103:\"The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS.\";s:4:\"refs\";s:726:\"[{\"url\":\"https:\\/\\/gist.github.com\\/B0UG\\/f0cfb356e23be3cd6ebea69566d6100a\",\"name\":\"https:\\/\\/gist.github.com\\/B0UG\\/f0cfb356e23be3cd6ebea69566d6100a\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/responsive-cookie-consent\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/responsive-cookie-consent\\/#developers\",\"refsource\":\"CONFIRM\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9067\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9067\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.exploit-db.com\\/exploits\\/44563\\/\",\"name\":\"44563\",\"refsource\":\"EXPLOIT-DB\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]}]\";}i:581;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2014-2558\";s:4:\"slug\";s:12:\"File Gallery\";s:19:\"versionEndExcluding\";s:7:\"1.7.9.2\";s:11:\"description\";s:273:\"The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \\\' (backslash quote) in the setting fields to /wp-admin/options-media.php, related to the create_function function.\";s:4:\"refs\";s:566:\"[{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2014\\/Apr\\/305\",\"name\":\"20140429 Arbitrary code execution by admins in File Gallery 1.7.7 (WordPress plugin)\",\"refsource\":\"FULLDISC\",\"tags\":[\"Exploit\"]},{\"url\":\"http:\\/\\/wordpress.org\\/plugins\\/file-gallery\\/changelog\\/\",\"name\":\"http:\\/\\/wordpress.org\\/plugins\\/file-gallery\\/changelog\\/\",\"refsource\":\"MISC\",\"tags\":[\"Patch\"]},{\"url\":\"http:\\/\\/www.securityfocus.com\\/bid\\/67120\",\"name\":\"67120\",\"refsource\":\"BID\",\"tags\":[]},{\"url\":\"http:\\/\\/www.securityfocus.com\\/bid\\/67183\",\"name\":\"67183\",\"refsource\":\"BID\",\"tags\":[]}]\";}i:582;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10915\";s:4:\"slug\";s:18:\"popup-by-supsystic\";s:19:\"versionEndExcluding\";s:5:\"1.7.9\";s:11:\"description\";s:66:\"The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.\";s:4:\"refs\";s:196:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/popup-by-supsystic\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/popup-by-supsystic\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:583;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18496\";s:4:\"slug\";s:8:\"htaccess\";s:19:\"versionEndExcluding\";s:5:\"1.7.6\";s:11:\"description\";s:71:\"The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:199:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/htaccess\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/htaccess\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:584;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-14126\";s:4:\"slug\";s:21:\"Participants Database\";s:19:\"versionEndExcluding\";s:8:\"1.7.5.10\";s:11:\"description\";s:71:\"The Participants Database plugin before 1.7.5.10 for WordPress has XSS.\";s:4:\"refs\";s:534:\"[{\"url\":\"https:\\/\\/limbenjamin.com\\/articles\\/cve-2017-14126-participants-database-xss.html\",\"name\":\"https:\\/\\/limbenjamin.com\\/articles\\/cve-2017-14126-participants-database-xss.html\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/participants-database\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/participants-database\\/#developers\",\"refsource\":\"CONFIRM\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.exploit-db.com\\/exploits\\/42618\\/\",\"name\":\"42618\",\"refsource\":\"EXPLOIT-DB\",\"tags\":[]}]\";}i:585;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:36:\"yith-woocommerce-multi-step-checkout\";s:19:\"versionEndExcluding\";s:5:\"1.7.5\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:586;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-2292\";s:4:\"slug\";s:13:\"wordpress-seo\";s:19:\"versionEndExcluding\";s:5:\"1.7.4\";s:11:\"description\";s:453:\"Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) order_by or (2) order parameter in the wpseo_bulk-editor page to wp-admin/admin.php.  NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.\";s:4:\"refs\";s:1156:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/130811\\/WordPress-SEO-By-Yoast-1.7.3.3-SQL-Injection.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/130811\\/WordPress-SEO-By-Yoast-1.7.3.3-SQL-Injection.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\"]},{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2015\\/Mar\\/73\",\"name\":\"20150312 WordPress SEO by Yoast <= 1.7.3.3 - Blind SQL Injection\",\"refsource\":\"FULLDISC\",\"tags\":[\"Exploit\"]},{\"url\":\"http:\\/\\/www.securitytracker.com\\/id\\/1031920\",\"name\":\"1031920\",\"refsource\":\"SECTRACK\",\"tags\":[\"Exploit\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wordpress-seo\\/changelog\\/\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wordpress-seo\\/changelog\\/\",\"refsource\":\"CONFIRM\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7841\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7841\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\"]},{\"url\":\"https:\\/\\/www.exploit-db.com\\/exploits\\/36413\\/\",\"name\":\"36413\",\"refsource\":\"EXPLOIT-DB\",\"tags\":[]},{\"url\":\"https:\\/\\/yoast.com\\/wordpress-seo-security-release\\/\",\"name\":\"https:\\/\\/yoast.com\\/wordpress-seo-security-release\\/\",\"refsource\":\"CONFIRM\",\"tags\":[\"Vendor Advisory\"]}]\";}i:587;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-2293\";s:4:\"slug\";s:13:\"wordpress-seo\";s:19:\"versionEndExcluding\";s:5:\"1.7.4\";s:11:\"description\";s:400:\"Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote attackers to hijack the authentication of certain users for requests that conduct SQL injection attacks via the (1) order_by or (2) order parameter in the wpseo_bulk-editor page.\";s:4:\"refs\";s:1039:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/130811\\/WordPress-SEO-By-Yoast-1.7.3.3-SQL-Injection.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/130811\\/WordPress-SEO-By-Yoast-1.7.3.3-SQL-Injection.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\"]},{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2015\\/Mar\\/73\",\"name\":\"20150312 WordPress SEO by Yoast <= 1.7.3.3 - Blind SQL Injection\",\"refsource\":\"FULLDISC\",\"tags\":[\"Exploit\"]},{\"url\":\"http:\\/\\/www.securitytracker.com\\/id\\/1031920\",\"name\":\"1031920\",\"refsource\":\"SECTRACK\",\"tags\":[\"Exploit\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wordpress-seo\\/changelog\\/\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wordpress-seo\\/changelog\\/\",\"refsource\":\"CONFIRM\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7841\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7841\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/yoast.com\\/wordpress-seo-security-release\\/\",\"name\":\"https:\\/\\/yoast.com\\/wordpress-seo-security-release\\/\",\"refsource\":\"CONFIRM\",\"tags\":[\"Vendor Advisory\"]}]\";}i:588;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18609\";s:4:\"slug\";s:12:\"magic-fields\";s:19:\"versionEndExcluding\";s:5:\"1.7.2\";s:11:\"description\";s:99:\"The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter.\";s:4:\"refs\";s:495:\"[{\"url\":\"https:\\/\\/sumofpwn.nl\\/advisory\\/2016\\/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html\",\"name\":\"https:\\/\\/sumofpwn.nl\\/advisory\\/2016\\/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/magic-fields\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/magic-fields\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:589;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18610\";s:4:\"slug\";s:12:\"magic-fields\";s:19:\"versionEndExcluding\";s:5:\"1.7.2\";s:11:\"description\";s:125:\"The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter.\";s:4:\"refs\";s:495:\"[{\"url\":\"https:\\/\\/sumofpwn.nl\\/advisory\\/2016\\/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html\",\"name\":\"https:\\/\\/sumofpwn.nl\\/advisory\\/2016\\/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/magic-fields\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/magic-fields\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:590;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18611\";s:4:\"slug\";s:12:\"magic-fields\";s:19:\"versionEndExcluding\";s:5:\"1.7.2\";s:11:\"description\";s:126:\"The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter.\";s:4:\"refs\";s:495:\"[{\"url\":\"https:\\/\\/sumofpwn.nl\\/advisory\\/2016\\/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html\",\"name\":\"https:\\/\\/sumofpwn.nl\\/advisory\\/2016\\/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/magic-fields\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/magic-fields\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:591;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15867\";s:4:\"slug\";s:11:\"slick-popup\";s:19:\"versionEndExcluding\";s:5:\"1.7.2\";s:11:\"description\";s:166:\"The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13# password for the slickpopupteam account, after a Subscriber calls a certain AJAX action.\";s:4:\"refs\";s:666:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/slick-popup\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/slick-popup\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9317\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9317\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2019\\/05\\/privilege-escalation-flaw-present-in-slick-popup-plugin\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2019\\/05\\/privilege-escalation-flaw-present-in-slick-popup-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:592;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9434\";s:4:\"slug\";s:18:\"kiwi-logo-carousel\";s:19:\"versionEndExcluding\";s:5:\"1.7.2\";s:11:\"description\";s:184:\"The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=kwlogos&page=kwlogos_settings tab or tab_flags_order parameter.\";s:4:\"refs\";s:631:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_3764bb40db5ed12aac2c7812d7544730.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_3764bb40db5ed12aac2c7812d7544730.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/kiwi-logo-carousel\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/kiwi-logo-carousel\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8290\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8290\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:593;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9433\";s:4:\"slug\";s:27:\"wp-social-bookmarking-light\";s:19:\"versionEndExcluding\";s:6:\"1.7.10\";s:11:\"description\";s:247:\"The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php.\";s:4:\"refs\";s:642:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_58e88633599b7b2fc0f44ce6fa7ff27d.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_58e88633599b7b2fc0f44ce6fa7ff27d.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-social-bookmarking-light\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-social-bookmarking-light\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8252\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8252\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:594;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18556\";s:4:\"slug\";s:20:\"bws-google-analytics\";s:19:\"versionEndExcluding\";s:5:\"1.7.1\";s:11:\"description\";s:83:\"The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:200:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-google-analytics\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-google-analytics\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:595;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:28:\"yith-woocommerce-ajax-search\";s:19:\"versionEndExcluding\";s:5:\"1.7.1\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:596;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9296\";s:4:\"slug\";s:16:\"download-monitor\";s:19:\"versionEndExcluding\";s:5:\"1.7.1\";s:11:\"description\";s:88:\"The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.\";s:4:\"refs\";s:215:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/download-monitor\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/download-monitor\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:597;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-19109\";s:4:\"slug\";s:6:\"wpforo\";s:19:\"versionEndExcluding\";s:5:\"1.7.0\";s:11:\"description\";s:92:\"The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF.\";s:4:\"refs\";s:169:\"[{\"url\":\"https:\\/\\/twitter.com\\/Sh0ckFR\\/status\\/1257298443527053313\",\"name\":\"https:\\/\\/twitter.com\\/Sh0ckFR\\/status\\/1257298443527053313\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:598;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-19110\";s:4:\"slug\";s:6:\"wpforo\";s:19:\"versionEndExcluding\";s:5:\"1.7.0\";s:11:\"description\";s:108:\"The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter.\";s:4:\"refs\";s:201:\"[{\"url\":\"https:\\/\\/twitter.com\\/Sh0ckFR\\/status\\/1257298443527053313\",\"name\":\"https:\\/\\/twitter.com\\/Sh0ckFR\\/status\\/1257298443527053313\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:599;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-19111\";s:4:\"slug\";s:6:\"wpforo\";s:19:\"versionEndExcluding\";s:5:\"1.7.0\";s:11:\"description\";s:113:\"The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter.\";s:4:\"refs\";s:201:\"[{\"url\":\"https:\\/\\/twitter.com\\/Sh0ckFR\\/status\\/1257298443527053313\",\"name\":\"https:\\/\\/twitter.com\\/Sh0ckFR\\/status\\/1257298443527053313\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:600;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-19112\";s:4:\"slug\";s:6:\"wpforo\";s:19:\"versionEndExcluding\";s:5:\"1.7.0\";s:11:\"description\";s:102:\"The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php.\";s:4:\"refs\";s:201:\"[{\"url\":\"https:\\/\\/twitter.com\\/Sh0ckFR\\/status\\/1257298443527053313\",\"name\":\"https:\\/\\/twitter.com\\/Sh0ckFR\\/status\\/1257298443527053313\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:601;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9350\";s:4:\"slug\";s:16:\"feed-them-social\";s:19:\"versionEndExcluding\";s:5:\"1.7.0\";s:11:\"description\";s:112:\"The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button.\";s:4:\"refs\";s:192:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/feed-them-social\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/feed-them-social\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:602;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9351\";s:4:\"slug\";s:16:\"feed-them-social\";s:19:\"versionEndExcluding\";s:5:\"1.7.0\";s:11:\"description\";s:127:\"The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.\";s:4:\"refs\";s:192:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/feed-them-social\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/feed-them-social\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:603;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10883\";s:4:\"slug\";s:25:\"simple-add-pages-or-posts\";s:19:\"versionEndExcluding\";s:3:\"1.7\";s:11:\"description\";s:90:\"The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users.\";s:4:\"refs\";s:234:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-add-pages-or-posts\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-add-pages-or-posts\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:604;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15773\";s:4:\"slug\";s:9:\"nd-travel\";s:19:\"versionEndExcluding\";s:3:\"1.7\";s:11:\"description\";s:120:\"The nd-travel plugin before 1.7 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.\";s:4:\"refs\";s:635:\"[{\"url\":\"https:\\/\\/threatpost.com\\/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn\\/147671\\/\",\"name\":\"https:\\/\\/threatpost.com\\/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn\\/147671\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/nd-travel\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/nd-travel\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9491\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9491\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:605;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15833\";s:4:\"slug\";s:27:\"simple-mail-address-encoder\";s:19:\"versionEndExcluding\";s:3:\"1.7\";s:11:\"description\";s:82:\"The simple-mail-address-encoder plugin before 1.7 for WordPress has reflected XSS.\";s:4:\"refs\";s:377:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-mail-address-encoder\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-mail-address-encoder\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9418\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9418\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:606;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-19306\";s:4:\"slug\";s:14:\"zoho-crm-forms\";s:19:\"versionEndExcluding\";s:7:\"1.6.9.2\";s:11:\"description\";s:106:\"The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName.\";s:4:\"refs\";s:349:\"[{\"url\":\"https:\\/\\/github.com\\/cybersecurityworks\\/Disclosed\\/issues\\/16\",\"name\":\"https:\\/\\/github.com\\/cybersecurityworks\\/Disclosed\\/issues\\/16\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/zoho-crm-forms\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/zoho-crm-forms\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:607;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9457\";s:4:\"slug\";s:11:\"pretty-link\";s:19:\"versionEndExcluding\";s:5:\"1.6.8\";s:11:\"description\";s:124:\"The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.\";s:4:\"refs\";s:590:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_9ca443a3759e5c7fd889ae0e02e044e6.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_9ca443a3759e5c7fd889ae0e02e044e6.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/pretty-link\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/pretty-link\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8249\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8249\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:608;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2008-7321\";s:4:\"slug\";s:9:\"tubepress\";s:19:\"versionEndExcluding\";s:5:\"1.6.5\";s:11:\"description\";s:56:\"The tubepress plugin before 1.6.5 for WordPress has XSS.\";s:4:\"refs\";s:178:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/tubepress\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/tubepress\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:609;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-27615\";s:4:\"slug\";s:9:\"loginizer\";s:19:\"versionEndExcluding\";s:5:\"1.6.4\";s:11:\"description\";s:141:\"The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_failed and lz_valid_ip.\";s:4:\"refs\";s:769:\"[{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2401010\\/loginizer\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2401010\\/loginizer\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpdeeply.com\\/loginizer-before-1-6-4-sqli-injection\\/\",\"name\":\"https:\\/\\/wpdeeply.com\\/loginizer-before-1-6-4-sqli-injection\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpscan.com\\/vulnerability\\/10441\",\"name\":\"https:\\/\\/wpscan.com\\/vulnerability\\/10441\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.zdnet.com\\/article\\/wordpress-deploys-forced-security-update-for-dangerous-bug-in-popular-plugin\\/\",\"name\":\"https:\\/\\/www.zdnet.com\\/article\\/wordpress-deploys-forced-security-update-for-dangerous-bug-in-popular-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:610;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-14766\";s:4:\"slug\";s:21:\"Simple Student Result\";s:19:\"versionEndExcluding\";s:5:\"1.6.4\";s:11:\"description\";s:243:\"The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_del_st_submit() function in functions.php only require knowing the student id number.\";s:4:\"refs\";s:629:\"[{\"url\":\"https:\\/\\/limbenjamin.com\\/articles\\/simple-student-result-auth-bypass.html\",\"name\":\"https:\\/\\/limbenjamin.com\\/articles\\/simple-student-result-auth-bypass.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-student-result\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-student-result\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8920\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8920\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:611;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:27:\"yith-woocommerce-affiliates\";s:19:\"versionEndExcluding\";s:5:\"1.6.3\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:612;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9326\";s:4:\"slug\";s:29:\"wp-business-intelligence-lite\";s:19:\"versionEndExcluding\";s:5:\"1.6.3\";s:11:\"description\";s:86:\"The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection.\";s:4:\"refs\";s:218:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-business-intelligence-lite\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-business-intelligence-lite\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:613;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9319\";s:4:\"slug\";s:26:\"gregs-high-performance-seo\";s:19:\"versionEndExcluding\";s:5:\"1.6.2\";s:11:\"description\";s:106:\"The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser.\";s:4:\"refs\";s:212:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/gregs-high-performance-seo\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/gregs-high-performance-seo\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:614;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9449\";s:4:\"slug\";s:16:\"microblog-poster\";s:19:\"versionEndExcluding\";s:5:\"1.6.2\";s:11:\"description\";s:156:\"The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php account_id parameter.\";s:4:\"refs\";s:620:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_642d8f7d8715d08f070a35b896f2d8bd.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_642d8f7d8715d08f070a35b896f2d8bd.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/microblog-poster\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/microblog-poster\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8321\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8321\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:615;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9455\";s:4:\"slug\";s:24:\"buddypress-activity-plus\";s:19:\"versionEndExcluding\";s:5:\"1.6.2\";s:11:\"description\";s:199:\"The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfb_photos[] parameter in a bpfb_remove_temp_images action.\";s:4:\"refs\";s:502:\"[{\"url\":\"https:\\/\\/security.dxw.com\\/advisories\\/csrf-and-arbitrary-file-deletion-in-buddypress-activity-plus-1-5\\/\",\"name\":\"https:\\/\\/security.dxw.com\\/advisories\\/csrf-and-arbitrary-file-deletion-in-buddypress-activity-plus-1-5\\/\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/buddypress-activity-plus\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/buddypress-activity-plus\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]}]\";}i:616;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10968\";s:4:\"slug\";s:11:\"peepso-core\";s:19:\"versionEndExcluding\";s:5:\"1.6.1\";s:11:\"description\";s:112:\"The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation.\";s:4:\"refs\";s:425:\"[{\"url\":\"http:\\/\\/www.pritect.net\\/blog\\/peepso-1-6-0-logged-user-privilege-escalation\",\"name\":\"http:\\/\\/www.pritect.net\\/blog\\/peepso-1-6-0-logged-user-privilege-escalation\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/peepso-core\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/peepso-core\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]}]\";}i:617;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15770\";s:4:\"slug\";s:16:\"woo-address-book\";s:19:\"versionEndExcluding\";s:5:\"1.6.0\";s:11:\"description\";s:104:\"The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks.\";s:4:\"refs\";s:354:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/woo-address-book\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/woo-address-book\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9849\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9849\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:618;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9496\";s:4:\"slug\";s:20:\"freshmail-newsletter\";s:19:\"versionEndExcluding\";s:3:\"1.6\";s:11:\"description\";s:121:\"The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the \'FM_form id=\' substring.\";s:4:\"refs\";s:247:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7972\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7972\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.exploit-db.com\\/exploits\\/36942\",\"name\":\"36942\",\"refsource\":\"EXPLOIT-DB\",\"tags\":[]}]\";}i:619;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2019-9567\";s:4:\"slug\";s:10:\"forminator\";s:19:\"versionEndExcluding\";s:3:\"1.6\";s:11:\"description\";s:126:\"The \"Forminator Contact Form, Poll & Quiz Builder\" plugin before 1.6 for WordPress has XSS via a custom input field of a poll.\";s:4:\"refs\";s:848:\"[{\"url\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/02\\/05\\/4\",\"name\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/02\\/05\\/4\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/security-consulting.icu\\/blog\\/2019\\/02\\/wordpress-forminator-persistent-xss-blind-sql-injection\\/\",\"name\":\"https:\\/\\/security-consulting.icu\\/blog\\/2019\\/02\\/wordpress-forminator-persistent-xss-blind-sql-injection\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/forminator\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/forminator\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9215\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9215\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:620;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2019-9568\";s:4:\"slug\";s:10:\"forminator\";s:19:\"versionEndExcluding\";s:3:\"1.6\";s:11:\"description\";s:212:\"The \"Forminator Contact Form, Poll & Quiz Builder\" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=forminator-entries entry[] parameter if the attacker has the delete permission.\";s:4:\"refs\";s:864:\"[{\"url\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/02\\/05\\/4\",\"name\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/02\\/05\\/4\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/security-consulting.icu\\/blog\\/2019\\/02\\/wordpress-forminator-persistent-xss-blind-sql-injection\\/\",\"name\":\"https:\\/\\/security-consulting.icu\\/blog\\/2019\\/02\\/wordpress-forminator-persistent-xss-blind-sql-injection\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/forminator\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/forminator\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9215\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9215\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:621;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:0:\"\";s:4:\"slug\";s:12:\"wpforms-lite\";s:19:\"versionEndExcluding\";s:5:\"1.5.9\";s:11:\"description\";s:101:\"WPForms Plugin version 1.5.8.2 and below were found to be vulnerable to authenticated stored XSS.\r\n\r\n\";s:4:\"refs\";s:80:\"https://www.jinsonvarghese.com/stored-xss-vulnerability-found-in-wpforms-plugin/\";}i:622;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-10385\";s:4:\"slug\";s:12:\"wpforms-lite\";s:19:\"versionEndExcluding\";s:5:\"1.5.9\";s:11:\"description\";s:138:\"A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress.\";s:4:\"refs\";s:1181:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/156874\\/WordPress-WPForms-1.5.9-Cross-Site-Scripting.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/156874\\/WordPress-WPForms-1.5.9-Cross-Site-Scripting.html\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wpforms-lite\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wpforms-lite\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10114\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10114\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.getastra.com\\/blog\\/911\\/plugin-exploit\\/stored-xss-vulnerability-found-in-wpforms-plugin\\/\",\"name\":\"https:\\/\\/www.getastra.com\\/blog\\/911\\/plugin-exploit\\/stored-xss-vulnerability-found-in-wpforms-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.jinsonvarghese.com\\/stored-xss-vulnerability-found-in-wpforms-plugin\\/\",\"name\":\"https:\\/\\/www.jinsonvarghese.com\\/stored-xss-vulnerability-found-in-wpforms-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:623;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18578\";s:4:\"slug\";s:21:\"crafty-social-buttons\";s:19:\"versionEndExcluding\";s:5:\"1.5.8\";s:11:\"description\";s:68:\"The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS.\";s:4:\"refs\";s:202:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/crafty-social-buttons\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/crafty-social-buttons\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:624;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10923\";s:4:\"slug\";s:25:\"woocommerce-store-toolkit\";s:19:\"versionEndExcluding\";s:5:\"1.5.8\";s:11:\"description\";s:89:\"The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation.\";s:4:\"refs\";s:210:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-store-toolkit\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-store-toolkit\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:625;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10923\";s:4:\"slug\";s:25:\"woocommerce-store-toolkit\";s:19:\"versionEndExcluding\";s:5:\"1.5.8\";s:11:\"description\";s:89:\"The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation.\";s:4:\"refs\";s:210:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-store-toolkit\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-store-toolkit\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:626;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10922\";s:4:\"slug\";s:25:\"woocommerce-store-toolkit\";s:19:\"versionEndExcluding\";s:5:\"1.5.7\";s:11:\"description\";s:89:\"The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation.\";s:4:\"refs\";s:233:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-store-toolkit\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-store-toolkit\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:627;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10922\";s:4:\"slug\";s:25:\"woocommerce-store-toolkit\";s:19:\"versionEndExcluding\";s:5:\"1.5.7\";s:11:\"description\";s:89:\"The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation.\";s:4:\"refs\";s:233:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-store-toolkit\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/woocommerce-store-toolkit\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:628;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18492\";s:4:\"slug\";s:18:\"contact-form-to-db\";s:19:\"versionEndExcluding\";s:5:\"1.5.7\";s:11:\"description\";s:81:\"The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:219:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-to-db\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-to-db\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:629;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9395\";s:4:\"slug\";s:11:\"users-ultra\";s:19:\"versionEndExcluding\";s:6:\"1.5.64\";s:11:\"description\";s:88:\"The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.\";s:4:\"refs\";s:537:\"[{\"url\":\"https:\\/\\/seclists.org\\/bugtraq\\/2015\\/Dec\\/12\",\"name\":\"https:\\/\\/seclists.org\\/bugtraq\\/2015\\/Dec\\/12\",\"refsource\":\"MISC\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/users-ultra\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/users-ultra\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8349\\/\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8349\\/\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:630;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9392\";s:4:\"slug\";s:11:\"users-ultra\";s:19:\"versionEndExcluding\";s:6:\"1.5.63\";s:11:\"description\";s:84:\"The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.\";s:4:\"refs\";s:543:\"[{\"url\":\"https:\\/\\/seclists.org\\/bugtraq\\/2015\\/Dec\\/13\",\"name\":\"https:\\/\\/seclists.org\\/bugtraq\\/2015\\/Dec\\/13\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/users-ultra\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/users-ultra\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8350\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8350\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:631;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9393\";s:4:\"slug\";s:11:\"users-ultra\";s:19:\"versionEndExcluding\";s:6:\"1.5.63\";s:11:\"description\";s:84:\"The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.\";s:4:\"refs\";s:354:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/users-ultra\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/users-ultra\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8350\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8350\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:632;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9394\";s:4:\"slug\";s:11:\"users-ultra\";s:19:\"versionEndExcluding\";s:6:\"1.5.63\";s:11:\"description\";s:114:\"The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.\";s:4:\"refs\";s:348:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/users-ultra\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/users-ultra\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8350\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8350\",\"refsource\":\"MISC\",\"tags\":[\"Not Applicable\"]}]\";}i:633;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18566\";s:4:\"slug\";s:9:\"user-role\";s:19:\"versionEndExcluding\";s:5:\"1.5.6\";s:11:\"description\";s:72:\"The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:178:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/user-role\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/user-role\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:634;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9402\";s:4:\"slug\";s:11:\"users-ultra\";s:19:\"versionEndExcluding\";s:6:\"1.5.59\";s:11:\"description\";s:103:\"The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.\";s:4:\"refs\";s:540:\"[{\"url\":\"https:\\/\\/seclists.org\\/bugtraq\\/2015\\/Nov\\/93\",\"name\":\"https:\\/\\/seclists.org\\/bugtraq\\/2015\\/Nov\\/93\",\"refsource\":\"MISC\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/users-ultra\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/users-ultra\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8243\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8243\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:635;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-17451\";s:4:\"slug\";s:11:\"WP Mailster\";s:19:\"versionEndExcluding\";s:5:\"1.5.5\";s:11:\"description\";s:145:\"The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php.\";s:4:\"refs\";s:640:\"[{\"url\":\"https:\\/\\/packetstormsecurity.com\\/files\\/145222\\/WordPress-WP-Mailster-1.5.4.0-Cross-Site-Scripting.html\",\"name\":\"https:\\/\\/packetstormsecurity.com\\/files\\/145222\\/WordPress-WP-Mailster-1.5.4.0-Cross-Site-Scripting.html\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-mailster\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-mailster\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8973\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8973\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:636;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-9335\";s:4:\"slug\";s:13:\"photo-gallery\";s:19:\"versionEndExcluding\";s:6:\"1.5.46\";s:11:\"description\";s:252:\"Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress. Successful exploitation of this vulnerability would allow a authenticated admin user to inject arbitrary JavaScript code that is viewed by other users.\";s:4:\"refs\";s:373:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10088\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10088\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:637;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16117\";s:4:\"slug\";s:13:\"photo-gallery\";s:19:\"versionEndExcluding\";s:6:\"1.5.35\";s:11:\"description\";s:143:\"Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php.\";s:4:\"refs\";s:1051:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/154433\\/WordPress-Photo-Gallery-1.5.34-Cross-Site-Scripting.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/154433\\/WordPress-Photo-Gallery-1.5.34-Cross-Site-Scripting.html\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2150912\\/photo-gallery\\/trunk\\/admin\\/models\\/Galleries.php?old=2135029&old_path=photo-gallery%2Ftrunk%2Fadmin%2Fmodels%2FGalleries.php\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2150912\\/photo-gallery\\/trunk\\/admin\\/models\\/Galleries.php?old=2135029&old_path=photo-gallery%2Ftrunk%2Fadmin%2Fmodels%2FGalleries.php\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9872\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9872\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:638;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16118\";s:4:\"slug\";s:13:\"photo-gallery\";s:19:\"versionEndExcluding\";s:6:\"1.5.35\";s:11:\"description\";s:146:\"Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php.\";s:4:\"refs\";s:1437:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/154433\\/WordPress-Photo-Gallery-1.5.34-Cross-Site-Scripting.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/154433\\/WordPress-Photo-Gallery-1.5.34-Cross-Site-Scripting.html\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2150912\\/photo-gallery\\/trunk\\/admin\\/controllers\\/Options.php?old=2142624&old_path=photo-gallery%2Ftrunk%2Fadmin%2Fcontrollers%2FOptions.php\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2150912\\/photo-gallery\\/trunk\\/admin\\/controllers\\/Options.php?old=2142624&old_path=photo-gallery%2Ftrunk%2Fadmin%2Fcontrollers%2FOptions.php\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2150912\\/photo-gallery\\/trunk\\/js\\/bwg.js?old=2135029&old_path=photo-gallery%2Ftrunk%2Fjs%2Fbwg.js\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2150912\\/photo-gallery\\/trunk\\/js\\/bwg.js?old=2135029&old_path=photo-gallery%2Ftrunk%2Fjs%2Fbwg.js\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9872\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9872\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:639;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16119\";s:4:\"slug\";s:13:\"photo-gallery\";s:19:\"versionEndExcluding\";s:6:\"1.5.35\";s:11:\"description\";s:164:\"SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php album_id parameter.\";s:4:\"refs\";s:1081:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/154432\\/WordPress-Photo-Gallery-1.5.34-SQL-Injection.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/154432\\/WordPress-Photo-Gallery-1.5.34-SQL-Injection.html\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2150912\\/photo-gallery\\/trunk\\/admin\\/controllers\\/Albumsgalleries.php?old=1845136&old_path=photo-gallery%2Ftrunk%2Fadmin%2Fcontrollers%2FAlbumsgalleries.php\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2150912\\/photo-gallery\\/trunk\\/admin\\/controllers\\/Albumsgalleries.php?old=1845136&old_path=photo-gallery%2Ftrunk%2Fadmin%2Fcontrollers%2FAlbumsgalleries.php\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9872\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9872\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:640;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9497\";s:4:\"slug\";s:11:\"ad-inserter\";s:19:\"versionEndExcluding\";s:5:\"1.5.3\";s:11:\"description\";s:132:\"The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.\";s:4:\"refs\";s:291:\"[{\"url\":\"https:\\/\\/packetstormsecurity.com\\/files\\/131798\\/\",\"name\":\"https:\\/\\/packetstormsecurity.com\\/files\\/131798\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7974\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7974\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:641;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18541\";s:4:\"slug\";s:11:\"xo-security\";s:19:\"versionEndExcluding\";s:5:\"1.5.3\";s:11:\"description\";s:58:\"The xo-security plugin before 1.5.3 for WordPress has XSS.\";s:4:\"refs\";s:205:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/xo-security\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/xo-security\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:642;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15823\";s:4:\"slug\";s:14:\"wps-hide-login\";s:19:\"versionEndExcluding\";s:5:\"1.5.3\";s:11:\"description\";s:99:\"The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass.\";s:4:\"refs\";s:611:\"[{\"url\":\"https:\\/\\/secupress.me\\/blog\\/wps-hide-login-v1-5-2-2-multiples-vulnerabilities\\/\",\"name\":\"https:\\/\\/secupress.me\\/blog\\/wps-hide-login-v1-5-2-2-multiples-vulnerabilities\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-hide-login\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-hide-login\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9469\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9469\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:643;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15824\";s:4:\"slug\";s:14:\"wps-hide-login\";s:19:\"versionEndExcluding\";s:5:\"1.5.3\";s:11:\"description\";s:88:\"The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass.\";s:4:\"refs\";s:611:\"[{\"url\":\"https:\\/\\/secupress.me\\/blog\\/wps-hide-login-v1-5-2-2-multiples-vulnerabilities\\/\",\"name\":\"https:\\/\\/secupress.me\\/blog\\/wps-hide-login-v1-5-2-2-multiples-vulnerabilities\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-hide-login\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-hide-login\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9469\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9469\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:644;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15825\";s:4:\"slug\";s:14:\"wps-hide-login\";s:19:\"versionEndExcluding\";s:5:\"1.5.3\";s:11:\"description\";s:98:\"The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass.\";s:4:\"refs\";s:611:\"[{\"url\":\"https:\\/\\/secupress.me\\/blog\\/wps-hide-login-v1-5-2-2-multiples-vulnerabilities\\/\",\"name\":\"https:\\/\\/secupress.me\\/blog\\/wps-hide-login-v1-5-2-2-multiples-vulnerabilities\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-hide-login\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-hide-login\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9469\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9469\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:645;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15826\";s:4:\"slug\";s:14:\"wps-hide-login\";s:19:\"versionEndExcluding\";s:5:\"1.5.3\";s:11:\"description\";s:115:\"The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field.\";s:4:\"refs\";s:611:\"[{\"url\":\"https:\\/\\/secupress.me\\/blog\\/wps-hide-login-v1-5-2-2-multiples-vulnerabilities\\/\",\"name\":\"https:\\/\\/secupress.me\\/blog\\/wps-hide-login-v1-5-2-2-multiples-vulnerabilities\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-hide-login\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-hide-login\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9469\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9469\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:646;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-8615\";s:4:\"slug\";s:5:\"tutor\";s:19:\"versionEndExcluding\";s:5:\"1.5.3\";s:11:\"description\";s:217:\"A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing other malicious actions (such as blocking legitimate instructors).\";s:4:\"refs\";s:755:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10058\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10058\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.getastra.com\\/blog\\/911\\/plugin-exploit\\/cross-site-request-forgery-in-tutor-lms-plugin\\/\",\"name\":\"https:\\/\\/www.getastra.com\\/blog\\/911\\/plugin-exploit\\/cross-site-request-forgery-in-tutor-lms-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.jinsonvarghese.com\\/cross-site-request-forgery-in-tutor-lms\\/\",\"name\":\"https:\\/\\/www.jinsonvarghese.com\\/cross-site-request-forgery-in-tutor-lms\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.themeum.com\\/tutor-lms-updated-v1-5-3\\/\",\"name\":\"https:\\/\\/www.themeum.com\\/tutor-lms-updated-v1-5-3\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:647;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:32:\"yith-woocommerce-product-add-ons\";s:19:\"versionEndExcluding\";s:6:\"1.5.23\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:648;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-14797\";s:4:\"slug\";s:19:\"10Web Photo Gallery\";s:19:\"versionEndExcluding\";s:6:\"1.5.23\";s:11:\"description\";s:88:\"The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS.\";s:4:\"refs\";s:193:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:649;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18582\";s:4:\"slug\";s:11:\"time-sheets\";s:19:\"versionEndExcluding\";s:5:\"1.5.2\";s:11:\"description\";s:74:\"The time-sheets plugin before 1.5.2 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:182:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/time-sheets\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/time-sheets\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:650;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-28649\";s:4:\"slug\";s:28:\"orbisius-child-theme-creator\";s:19:\"versionEndExcluding\";s:5:\"1.5.2\";s:11:\"description\";s:121:\"The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file.\";s:4:\"refs\";s:485:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/orbisius-child-theme-creator\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/orbisius-child-theme-creator\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/10\\/high-severity-vulnerability-patched-in-child-theme-creator-by-orbisius\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/10\\/high-severity-vulnerability-patched-in-child-theme-creator-by-orbisius\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:651;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-9043\";s:4:\"slug\";s:10:\"wp-central\";s:19:\"versionEndExcluding\";s:5:\"1.5.2\";s:11:\"description\";s:88:\"The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key.\";s:4:\"refs\";s:553:\"[{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset?&old=2244363%40wp-central&new=2244363%40wp-central\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset?&old=2244363%40wp-central&new=2244363%40wp-central\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-central\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-central\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10074\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10074\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:652;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-21011\";s:4:\"slug\";s:10:\"charitable\";s:19:\"versionEndExcluding\";s:6:\"1.5.14\";s:11:\"description\";s:103:\"The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details.\";s:4:\"refs\";s:428:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/charitable\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/charitable\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/www.wpcharitable.com\\/release-notes-security-release-1-5-14\\/\",\"name\":\"https:\\/\\/www.wpcharitable.com\\/release-notes-security-release-1-5-14\\/\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:653;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9436\";s:4:\"slug\";s:15:\"dynamic-widgets\";s:19:\"versionEndExcluding\";s:6:\"1.5.11\";s:11:\"description\";s:142:\"The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id parameter.\";s:4:\"refs\";s:625:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_489304900a50751da1495e2ea660bc51.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_489304900a50751da1495e2ea660bc51.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/dynamic-widgets\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/dynamic-widgets\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8258\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8258\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:654;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9437\";s:4:\"slug\";s:15:\"dynamic-widgets\";s:19:\"versionEndExcluding\";s:6:\"1.5.11\";s:11:\"description\";s:151:\"The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit parameter.\";s:4:\"refs\";s:625:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_489304900a50751da1495e2ea660bc51.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_489304900a50751da1495e2ea660bc51.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/dynamic-widgets\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/dynamic-widgets\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8258\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8258\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:655;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9336\";s:4:\"slug\";s:11:\"clean-login\";s:19:\"versionEndExcluding\";s:5:\"1.5.1\";s:11:\"description\";s:68:\"The clean-login plugin before 1.5.1 for WordPress has reflected XSS.\";s:4:\"refs\";s:205:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/clean-login\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/clean-login\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:656;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-17239\";s:4:\"slug\";s:26:\"download-plugins-dashboard\";s:19:\"versionEndExcluding\";s:5:\"1.5.1\";s:11:\"description\";s:174:\"includes/settings/class-alg-download-plugins-settings.php in the download-plugins-dashboard plugin through 1.5.0 for WordPress has multiple unauthenticated stored XSS issues.\";s:4:\"refs\";s:384:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/download-plugins-dashboard\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/download-plugins-dashboard\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9896\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9896\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:657;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-20977\";s:4:\"slug\";s:34:\"all-in-one-schemaorg-rich-snippets\";s:19:\"versionEndExcluding\";s:5:\"1.5.0\";s:11:\"description\";s:102:\"The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.\";s:4:\"refs\";s:228:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/all-in-one-schemaorg-rich-snippets\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/all-in-one-schemaorg-rich-snippets\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:658;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18581\";s:4:\"slug\";s:11:\"time-sheets\";s:19:\"versionEndExcluding\";s:5:\"1.5.0\";s:11:\"description\";s:85:\"The time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list.\";s:4:\"refs\";s:182:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/time-sheets\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/time-sheets\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:659;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2014-10381\";s:4:\"slug\";s:21:\"user-domain-whitelist\";s:19:\"versionEndExcluding\";s:3:\"1.5\";s:11:\"description\";s:67:\"The user-domain-whitelist plugin before 1.5 for WordPress has CSRF.\";s:4:\"refs\";s:202:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/user-domain-whitelist\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/user-domain-whitelist\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:660;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10762\";s:4:\"slug\";s:23:\"CampTix Event Ticketing\";s:19:\"versionEndExcluding\";s:3:\"1.5\";s:11:\"description\";s:110:\"The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used.\";s:4:\"refs\";s:359:\"[{\"url\":\"https:\\/\\/hackerone.com\\/reports\\/151516\",\"name\":\"https:\\/\\/hackerone.com\\/reports\\/151516\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/camptix\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/camptix\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:661;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10763\";s:4:\"slug\";s:23:\"CampTix Event Ticketing\";s:19:\"versionEndExcluding\";s:3:\"1.5\";s:11:\"description\";s:119:\"The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body.\";s:4:\"refs\";s:359:\"[{\"url\":\"https:\\/\\/hackerone.com\\/reports\\/152958\",\"name\":\"https:\\/\\/hackerone.com\\/reports\\/152958\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/camptix\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/camptix\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:662;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15819\";s:4:\"slug\";s:26:\"nd-restaurant-reservations\";s:19:\"versionEndExcluding\";s:3:\"1.5\";s:11:\"description\";s:137:\"The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication.\";s:4:\"refs\";s:701:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/privilege-escalation-vulnerability-in-wordpress-nd-restaurant-reservations-plugin\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/privilege-escalation-vulnerability-in-wordpress-nd-restaurant-reservations-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/nd-restaurant-reservations\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/nd-restaurant-reservations\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9501\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9501\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:663;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9445\";s:4:\"slug\";s:18:\"unite-gallery-lite\";s:19:\"versionEndExcluding\";s:3:\"1.5\";s:11:\"description\";s:150:\"The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin-ajax.php in a unitegallery_ajax_action operation.\";s:4:\"refs\";s:560:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/132842\\/\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/132842\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/unite-gallery-lite\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/unite-gallery-lite\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8113\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8113\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:664;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9446\";s:4:\"slug\";s:18:\"unite-gallery-lite\";s:19:\"versionEndExcluding\";s:3:\"1.5\";s:11:\"description\";s:120:\"The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to wp-admin/admin-ajax.php.\";s:4:\"refs\";s:560:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/132842\\/\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/132842\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/unite-gallery-lite\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/unite-gallery-lite\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8113\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8113\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:665;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9447\";s:4:\"slug\";s:18:\"unite-gallery-lite\";s:19:\"versionEndExcluding\";s:3:\"1.5\";s:11:\"description\";s:132:\"The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters.\";s:4:\"refs\";s:560:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/132842\\/\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/132842\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/unite-gallery-lite\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/unite-gallery-lite\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8113\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8113\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:666;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18487\";s:4:\"slug\";s:35:\"adsense-plugin (aka Google AdSense)\";s:19:\"versionEndExcluding\";s:4:\"1.44\";s:11:\"description\";s:97:\"The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:211:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/adsense-plugin\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/adsense-plugin\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:667;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:32:\"yith-woocommerce-request-a-quote\";s:19:\"versionEndExcluding\";s:5:\"1.4.9\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:668;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15082\";s:4:\"slug\";s:20:\"360-product-rotation\";s:19:\"versionEndExcluding\";s:5:\"1.4.8\";s:11:\"description\";s:77:\"The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.\";s:4:\"refs\";s:362:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/360-product-rotation\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/360-product-rotation\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9405\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9405\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:669;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18526\";s:4:\"slug\";s:10:\"moreads-se\";s:19:\"versionEndExcluding\";s:5:\"1.4.7\";s:11:\"description\";s:57:\"The moreads-se plugin before 1.4.7 for WordPress has XSS.\";s:4:\"refs\";s:180:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/moreads-se\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/moreads-se\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:670;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15828\";s:4:\"slug\";s:13:\"one-click-ssl\";s:19:\"versionEndExcluding\";s:5:\"1.4.7\";s:11:\"description\";s:61:\"The one-click-ssl plugin before 1.4.7 for WordPress has CSRF.\";s:4:\"refs\";s:365:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/one-click-ssl\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/one-click-ssl\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9448\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9448\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:671;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9411\";s:4:\"slug\";s:9:\"Postmatic\";s:19:\"versionEndExcluding\";s:5:\"1.4.6\";s:11:\"description\";s:56:\"The Postmatic plugin before 1.4.6 for WordPress has XSS.\";s:4:\"refs\";s:357:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/postmatic\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/postmatic\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8183\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8183\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:672;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:30:\"yith-woocommerce-cart-messages\";s:19:\"versionEndExcluding\";s:5:\"1.4.5\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:673;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-35234\";s:4:\"slug\";s:12:\"easy-wp-smtp\";s:19:\"versionEndExcluding\";s:5:\"1.4.4\";s:11:\"description\";s:412:\"The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. If an attacker can list the wp-content/plugins/easy-wp-smtp/ directory, then they can discover a log file (such as #############_debug_log.txt) that contains all password-reset links. The attacker can request a reset of the Administrator password and then use a link found there.\";s:4:\"refs\";s:401:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/easy-wp-smtp\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/easy-wp-smtp\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:674;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-19207\";s:4:\"slug\";s:18:\"wp-gdpr-compliance\";s:19:\"versionEndExcluding\";s:5:\"1.4.3\";s:11:\"description\";s:228:\"The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishandled, as exploited in the wild in November 2018.\";s:4:\"refs\";s:806:\"[{\"url\":\"http:\\/\\/www.securityfocus.com\\/bid\\/105921\",\"name\":\"105921\",\"refsource\":\"BID\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-gdpr-compliance\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-gdpr-compliance\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9144\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9144\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2018\\/11\\/trends-following-vulnerability-in-wp-gdpr-compliance-plugin\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2018\\/11\\/trends-following-vulnerability-in-wp-gdpr-compliance-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:675;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2013-7482\";s:4:\"slug\";s:14:\"reflex-gallery\";s:19:\"versionEndExcluding\";s:5:\"1.4.3\";s:11:\"description\";s:61:\"The reflex-gallery plugin before 1.4.3 for WordPress has XSS.\";s:4:\"refs\";s:188:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/reflex-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/reflex-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:676;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9466\";s:4:\"slug\";s:13:\"wti-like-post\";s:19:\"versionEndExcluding\";s:5:\"1.4.3\";s:11:\"description\";s:204:\"The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable.\";s:4:\"refs\";s:611:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_576345187f5867ec8921b12de5884fb1.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_576345187f5867ec8921b12de5884fb1.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wti-like-post\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wti-like-post\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8318\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8318\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:677;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9493\";s:4:\"slug\";s:12:\"my-wish-list\";s:19:\"versionEndExcluding\";s:5:\"1.4.2\";s:11:\"description\";s:75:\"The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:312:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/my-wish-list\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/my-wish-list\\/#developers\",\"refsource\":\"CONFIRM\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7937\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7937\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:678;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-20968\";s:4:\"slug\";s:20:\"wp-ultimate-exporter\";s:19:\"versionEndExcluding\";s:5:\"1.4.2\";s:11:\"description\";s:68:\"The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.\";s:4:\"refs\";s:224:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-ultimate-exporter\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-ultimate-exporter\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:679;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18572\";s:4:\"slug\";s:11:\"gnucommerce\";s:19:\"versionEndExcluding\";s:5:\"1.4.2\";s:11:\"description\";s:58:\"The gnucommerce plugin before 1.4.2 for WordPress has XSS.\";s:4:\"refs\";s:205:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/gnucommerce\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/gnucommerce\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:680;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2018-6465\";s:4:\"slug\";s:12:\"PropertyHive\";s:19:\"versionEndExcluding\";s:6:\"1.4.15\";s:11:\"description\";s:148:\"The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php.\";s:4:\"refs\";s:916:\"[{\"url\":\"https:\\/\\/packetstormsecurity.com\\/files\\/146174\\/WordPress-Propertyhive-1.4.14-Cross-Site-Scripting.html\",\"name\":\"https:\\/\\/packetstormsecurity.com\\/files\\/146174\\/WordPress-Propertyhive-1.4.14-Cross-Site-Scripting.html\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/propertyhive\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/propertyhive\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/support\\/topic\\/wordpress-propertyhive-1-4-14-cross-site-scripting\\/\",\"name\":\"https:\\/\\/wordpress.org\\/support\\/topic\\/wordpress-propertyhive-1-4-14-cross-site-scripting\\/\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9020\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9020\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:681;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9302\";s:4:\"slug\";s:13:\"simple-fields\";s:19:\"versionEndExcluding\";s:6:\"1.4.11\";s:11:\"description\";s:61:\"The simple-fields plugin before 1.4.11 for WordPress has XSS.\";s:4:\"refs\";s:209:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-fields\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-fields\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:682;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-17229\";s:4:\"slug\";s:41:\"motors-car-dealership-classified-listings\";s:19:\"versionEndExcluding\";s:5:\"1.4.1\";s:11:\"description\";s:179:\"includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress has multiple stored XSS issues.\";s:4:\"refs\";s:497:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/multiple-vulnerabilities-in-wordpress-motors-car-dealer-classified-ads-plugin\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/multiple-vulnerabilities-in-wordpress-motors-car-dealer-classified-ads-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/motors-car-dealership-classified-listings\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/motors-car-dealership-classified-listings\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:683;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:33:\"yith-woocommerce-advanced-reviews\";s:19:\"versionEndExcluding\";s:5:\"1.4.0\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:684;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15772\";s:4:\"slug\";s:12:\"nd-donations\";s:19:\"versionEndExcluding\";s:3:\"1.4\";s:11:\"description\";s:123:\"The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.\";s:4:\"refs\";s:641:\"[{\"url\":\"https:\\/\\/threatpost.com\\/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn\\/147671\\/\",\"name\":\"https:\\/\\/threatpost.com\\/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn\\/147671\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/nd-donations\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/nd-donations\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9493\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9493\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:685;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10955\";s:4:\"slug\";s:14:\"cysteme-finder\";s:19:\"versionEndExcluding\";s:3:\"1.4\";s:11:\"description\";s:118:\"The cysteme-finder plugin before 1.4 for WordPress has unrestricted file upload because of incorrect session tracking.\";s:4:\"refs\";s:367:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/cysteme-finder\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/cysteme-finder\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8612\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8612\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:686;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-12074\";s:4:\"slug\";s:48:\"users-customers-import-export-for-wp-woocommerce\";s:19:\"versionEndExcluding\";s:4:\"1.39\";s:11:\"description\";s:148:\"The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV.\";s:4:\"refs\";s:253:\"[{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/03\\/vulnerability-patched-in-import-export-wordpress-users\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/03\\/vulnerability-patched-in-import-export-wordpress-users\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:687;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18494\";s:4:\"slug\";s:20:\"custom-search-plugin\";s:19:\"versionEndExcluding\";s:4:\"1.36\";s:11:\"description\";s:82:\"The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:223:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/custom-search-plugin\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/custom-search-plugin\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:688;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18565\";s:4:\"slug\";s:7:\"updater\";s:19:\"versionEndExcluding\";s:4:\"1.35\";s:11:\"description\";s:69:\"The updater plugin before 1.35 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:174:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/updater\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/updater\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:689;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10971\";s:4:\"slug\";s:16:\"MemberSonic Lite\";s:19:\"versionEndExcluding\";s:5:\"1.302\";s:11:\"description\";s:147:\"The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required.\";s:4:\"refs\";s:221:\"[{\"url\":\"http:\\/\\/www.pritect.net\\/blog\\/membersonic-lite-1-2-unauthenticated-login\",\"name\":\"http:\\/\\/www.pritect.net\\/blog\\/membersonic-lite-1-2-unauthenticated-login\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:690;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10971\";s:4:\"slug\";s:16:\"MemberSonic Lite\";s:19:\"versionEndExcluding\";s:5:\"1.302\";s:11:\"description\";s:147:\"The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required.\";s:4:\"refs\";s:221:\"[{\"url\":\"http:\\/\\/www.pritect.net\\/blog\\/membersonic-lite-1-2-unauthenticated-login\",\"name\":\"http:\\/\\/www.pritect.net\\/blog\\/membersonic-lite-1-2-unauthenticated-login\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:691;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18536\";s:4:\"slug\";s:21:\"stop-user-enumeration\";s:19:\"versionEndExcluding\";s:5:\"1.3.8\";s:11:\"description\";s:68:\"The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.\";s:4:\"refs\";s:202:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/stop-user-enumeration\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/stop-user-enumeration\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:692;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:27:\"yith-woocommerce-gift-cards\";s:19:\"versionEndExcluding\";s:5:\"1.3.8\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:693;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:30:\"yith-woocommerce-brands-add-on\";s:19:\"versionEndExcluding\";s:5:\"1.3.7\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:694;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-15919\";s:4:\"slug\";s:26:\"ultimate-form-builder-lite\";s:19:\"versionEndExcluding\";s:5:\"1.3.7\";s:11:\"description\";s:149:\"The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php.\";s:4:\"refs\";s:793:\"[{\"url\":\"http:\\/\\/www.securityfocus.com\\/bid\\/101604\",\"name\":\"101604\",\"refsource\":\"BID\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-form-builder-lite\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-form-builder-lite\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8935\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8935\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2017\\/10\\/zero-day-vulnerability-ultimate-form-builder-lite\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2017\\/10\\/zero-day-vulnerability-ultimate-form-builder-lite\\/\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:695;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18557\";s:4:\"slug\";s:15:\"bws-google-maps\";s:19:\"versionEndExcluding\";s:5:\"1.3.6\";s:11:\"description\";s:78:\"The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:190:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-google-maps\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-google-maps\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:696;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:29:\"yith-woocommerce-social-login\";s:19:\"versionEndExcluding\";s:5:\"1.3.6\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:697;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:29:\"yith-woocommerce-subscription\";s:19:\"versionEndExcluding\";s:5:\"1.3.6\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:698;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:35:\"yith-woocommerce-points-and-rewards\";s:19:\"versionEndExcluding\";s:5:\"1.3.6\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:699;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-12977\";s:4:\"slug\";s:59:\"Web-Dorado \"Photo Gallery by WD - Responsive Photo Gallery\"\";s:19:\"versionEndExcluding\";s:6:\"1.3.51\";s:11:\"description\";s:304:\"The Web-Dorado \"Photo Gallery by WD - Responsive Photo Gallery\" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwg_edit_tag() in photo-gallery.php and edit_tag() in admin/controllers/BWGControllerTags_bwg.php. It is exploitable by administrators via the tag_id parameter.\";s:4:\"refs\";s:441:\"[{\"url\":\"https:\\/\\/github.com\\/jgj212\\/Advisories\\/blob\\/master\\/photo-gallery.1.3.50-SQL\",\"name\":\"https:\\/\\/github.com\\/jgj212\\/Advisories\\/blob\\/master\\/photo-gallery.1.3.50-SQL\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:700;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15647\";s:4:\"slug\";s:10:\"groundhogg\";s:19:\"versionEndExcluding\";s:5:\"1.3.5\";s:11:\"description\";s:127:\"The groundhogg plugin before 1.3.5 for WordPress has wp-admin/admin-ajax.php?action=bulk_action_listener remote code execution.\";s:4:\"refs\";s:778:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/groundhogg\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/groundhogg\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9834\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9834\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.pluginvulnerabilities.com\\/2019\\/04\\/05\\/our-proactive-monitoring-caught-an-authenticated-remote-code-execution-rce-vulnerability-being-introduced-in-to-groundhogg\",\"name\":\"https:\\/\\/www.pluginvulnerabilities.com\\/2019\\/04\\/05\\/our-proactive-monitoring-caught-an-authenticated-remote-code-execution-rce-vulnerability-being-introduced-in-to-groundhogg\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:701;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15866\";s:4:\"slug\";s:13:\"crelly-slider\";s:19:\"versionEndExcluding\";s:5:\"1.3.5\";s:11:\"description\";s:151:\"The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider.\";s:4:\"refs\";s:490:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/arbitrary-file-upload-vulnerability-in-wordpress-crelly-slider-plugin\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/arbitrary-file-upload-vulnerability-in-wordpress-crelly-slider-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/crelly-slider\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/crelly-slider\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]\";}i:702;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18502\";s:4:\"slug\";s:10:\"subscriber\";s:19:\"versionEndExcluding\";s:5:\"1.3.5\";s:11:\"description\";s:73:\"The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:198:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/subscriber\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/subscriber\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]\";}i:703;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10872\";s:4:\"slug\";s:15:\"ultimate-member\";s:19:\"versionEndExcluding\";s:6:\"1.3.40\";s:11:\"description\";s:81:\"The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.\";s:4:\"refs\";s:348:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-member\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-member\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9738\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9738\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:704;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10872\";s:4:\"slug\";s:15:\"ultimate-member\";s:19:\"versionEndExcluding\";s:6:\"1.3.40\";s:11:\"description\";s:81:\"The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form.\";s:4:\"refs\";s:348:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-member\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-member\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9738\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9738\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:705;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:39:\"yith-woocommerce-recover-abandoned-cart\";s:19:\"versionEndExcluding\";s:5:\"1.3.4\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:706;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-9371\";s:4:\"slug\";s:28:\"appointment-booking-calendar\";s:19:\"versionEndExcluding\";s:6:\"1.3.35\";s:11:\"description\";s:211:\"Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScript or HTML.\";s:4:\"refs\";s:561:\"[{\"url\":\"https:\\/\\/drive.google.com\\/open?id=1NNcYPaJir9SleyVr4cSPqpI2LNM7rtx9\",\"name\":\"https:\\/\\/drive.google.com\\/open?id=1NNcYPaJir9SleyVr4cSPqpI2LNM7rtx9\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/appointment-booking-calendar\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/appointment-booking-calendar\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.hotdreamweaver.com\\/support\\/view.php?id=815925\",\"name\":\"https:\\/\\/www.hotdreamweaver.com\\/support\\/view.php?id=815925\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:707;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-9372\";s:4:\"slug\";s:28:\"appointment-booking-calendar\";s:19:\"versionEndExcluding\";s:6:\"1.3.35\";s:11:\"description\";s:339:\"The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking form to be any formula, which then could be exported via the Bookings list tab in /wp-admin/admin.php?page=cpabc_appointments.php. The attacker could achieve remote code execution via CSV injection.\";s:4:\"refs\";s:561:\"[{\"url\":\"https:\\/\\/drive.google.com\\/open?id=1NNcYPaJir9SleyVr4cSPqpI2LNM7rtx9\",\"name\":\"https:\\/\\/drive.google.com\\/open?id=1NNcYPaJir9SleyVr4cSPqpI2LNM7rtx9\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/appointment-booking-calendar\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/appointment-booking-calendar\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.hotdreamweaver.com\\/support\\/view.php?id=815925\",\"name\":\"https:\\/\\/www.hotdreamweaver.com\\/support\\/view.php?id=815925\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:708;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-11738\";s:4:\"slug\";s:10:\"duplicator\";s:19:\"versionEndExcluding\";s:6:\"1.3.28\";s:11:\"description\";s:196:\"The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init.\";s:4:\"refs\";s:501:\"[{\"url\":\"https:\\/\\/snapcreek.com\\/duplicator\\/docs\\/changelog\\/?lite\",\"name\":\"https:\\/\\/snapcreek.com\\/duplicator\\/docs\\/changelog\\/?lite\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/02\\/active-attack-on-recently-patched-duplicator-plugin-vulnerability-affects-over-1-million-sites\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/02\\/active-attack-on-recently-patched-duplicator-plugin-vulnerability-affects-over-1-million-sites\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:709;O:8:\"stdClass\":6:{s:6:\"CVE_ID\";s:0:\"\";s:4:\"slug\";s:10:\"duplicator\";s:19:\"versionEndExcluding\";s:6:\"1.3.28\";s:11:\"description\";s:219:\"Critical security issue discovered in Duplicator 1.3.27 and below. https://www.wordfence.com/blog/2020/02/active-attack-on-recently-patched-duplicator-plugin-vulnerability-affects-over-1-million-sites/ Credit @Wordfence\";s:14:\"recommendation\";s:38:\"Update immediately to 1.3.28 or newer.\";s:4:\"refs\";s:0:\"\";}i:710;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:34:\"yith-woocommerce-badges-management\";s:19:\"versionEndExcluding\";s:6:\"1.3.21\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:711;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18546\";s:4:\"slug\";s:13:\"jayj-quicktag\";s:19:\"versionEndExcluding\";s:5:\"1.3.2\";s:11:\"description\";s:61:\"The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF.\";s:4:\"refs\";s:210:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/jayj-quicktag\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/jayj-quicktag\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:712;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-21012\";s:4:\"slug\";s:23:\"cf7-invisible-recaptcha\";s:19:\"versionEndExcluding\";s:5:\"1.3.2\";s:11:\"description\";s:70:\"The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.\";s:4:\"refs\";s:538:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/cf7-invisible-recaptcha\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/cf7-invisible-recaptcha\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/www.pluginvulnerabilities.com\\/2018\\/05\\/17\\/reflected-cross-site-scripting-xss-vulnerability-in-cf7-invisible-recaptcha\\/\",\"name\":\"https:\\/\\/www.pluginvulnerabilities.com\\/2018\\/05\\/17\\/reflected-cross-site-scripting-xss-vulnerability-in-cf7-invisible-recaptcha\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:713;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10950\";s:4:\"slug\";s:4:\"sirv\";s:19:\"versionEndExcluding\";s:5:\"1.3.2\";s:11:\"description\";s:82:\"The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.\";s:4:\"refs\";s:577:\"[{\"url\":\"http:\\/\\/lenonleite.com.br\\/en\\/2016\\/11\\/10\\/sirv-1-3-1-plugin-for-wordpress\\/\",\"name\":\"http:\\/\\/lenonleite.com.br\\/en\\/2016\\/11\\/10\\/sirv-1-3-1-plugin-for-wordpress\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/sirv\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/sirv\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8673\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8673\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:714;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10950\";s:4:\"slug\";s:4:\"sirv\";s:19:\"versionEndExcluding\";s:5:\"1.3.2\";s:11:\"description\";s:82:\"The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.\";s:4:\"refs\";s:577:\"[{\"url\":\"http:\\/\\/lenonleite.com.br\\/en\\/2016\\/11\\/10\\/sirv-1-3-1-plugin-for-wordpress\\/\",\"name\":\"http:\\/\\/lenonleite.com.br\\/en\\/2016\\/11\\/10\\/sirv-1-3-1-plugin-for-wordpress\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/sirv\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/sirv\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8673\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8673\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:715;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9304\";s:4:\"slug\";s:15:\"ultimate-member\";s:19:\"versionEndExcluding\";s:6:\"1.3.18\";s:11:\"description\";s:78:\"The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input.\";s:4:\"refs\";s:208:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-member\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-member\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]\";}i:716;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18543\";s:4:\"slug\";s:13:\"invite-anyone\";s:19:\"versionEndExcluding\";s:6:\"1.3.16\";s:11:\"description\";s:110:\"The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.\";s:4:\"refs\";s:210:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/invite-anyone\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/invite-anyone\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:717;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18544\";s:4:\"slug\";s:13:\"invite-anyone\";s:19:\"versionEndExcluding\";s:6:\"1.3.16\";s:11:\"description\";s:74:\"The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.\";s:4:\"refs\";s:210:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/invite-anyone\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/invite-anyone\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:718;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18545\";s:4:\"slug\";s:13:\"invite-anyone\";s:19:\"versionEndExcluding\";s:6:\"1.3.16\";s:11:\"description\";s:119:\"The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.\";s:4:\"refs\";s:210:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/invite-anyone\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/invite-anyone\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:719;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9356\";s:4:\"slug\";s:10:\"wp-vipergb\";s:19:\"versionEndExcluding\";s:6:\"1.3.16\";s:11:\"description\";s:139:\"The wp-vipergb plugin before 1.3.16 for WordPress has XSS via add_query_arg() and remove_query_arg(), a different issue than CVE-2014-9460.\";s:4:\"refs\";s:479:\"[{\"url\":\"https:\\/\\/make.wordpress.org\\/plugins\\/2015\\/04\\/20\\/fixing-add_query_arg-and-remove_query_arg-usage\\/\",\"name\":\"https:\\/\\/make.wordpress.org\\/plugins\\/2015\\/04\\/20\\/fixing-add_query_arg-and-remove_query_arg-usage\\/\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-vipergb\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-vipergb\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:720;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:27:\"yith-woocommerce-quick-view\";s:19:\"versionEndExcluding\";s:6:\"1.3.15\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:721;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:36:\"yith-woocommerce-added-to-cart-popup\";s:19:\"versionEndExcluding\";s:6:\"1.3.13\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:722;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:31:\"yith-woocommerce-zoom-magnifier\";s:19:\"versionEndExcluding\";s:6:\"1.3.12\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:723;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:0:\"\";s:4:\"slug\";s:10:\"groundhogg\";s:19:\"versionEndExcluding\";s:9:\"1.3.11.13\";s:11:\"description\";s:232:\"Wordpress Groundhogg plugin with a version lower than 1.3.11.13 is affected by an Authenticated SQL Injection vulnerability.\r\n\r\nhttps://nitesculucian.github.io/2019/10/23/groundhogg-1-3-2-authentificated-sql-injection-vulnerability/\";s:4:\"refs\";s:41:\"https://wordpress.org/plugins/groundhogg/\";}i:724;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:29:\"yith-woocommerce-waiting-list\";s:19:\"versionEndExcluding\";s:6:\"1.3.11\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:725;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9494\";s:4:\"slug\";s:19:\"indieweb-post-kinds\";s:19:\"versionEndExcluding\";s:7:\"1.3.1.1\";s:11:\"description\";s:118:\"The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier.\";s:4:\"refs\";s:141:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7982\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7982\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:726;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:0:\"\";s:4:\"slug\";s:15:\"email-templates\";s:19:\"versionEndExcluding\";s:7:\"1.3.1.1\";s:11:\"description\";s:88:\"https://blog.nintechnet.com/multiple-wordpress-plugins-vulnerable-to-html-injection/\r\n\r\n\";s:4:\"refs\";s:0:\"\";}i:727;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2012-5469\";s:4:\"slug\";s:19:\"Portable phpMyAdmin\";s:19:\"versionEndExcluding\";s:5:\"1.3.1\";s:11:\"description\";s:218:\"The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod.\";s:4:\"refs\";s:416:\"[{\"url\":\"http:\\/\\/archives.neohapsis.com\\/archives\\/bugtraq\\/2012-12\\/0092.html\",\"name\":\"20121212 \'portable-phpMyAdmin (WordPress Plugin)\' Authentication Bypass (CVE-2012-5469)\",\"refsource\":\"BUGTRAQ\",\"tags\":[\"Exploit\"]},{\"url\":\"http:\\/\\/wordpress.org\\/extend\\/plugins\\/portable-phpmyadmin\\/changelog\\/\",\"name\":\"http:\\/\\/wordpress.org\\/extend\\/plugins\\/portable-phpmyadmin\\/changelog\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:728;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10912\";s:4:\"slug\";s:19:\"universal-analytics\";s:19:\"versionEndExcluding\";s:5:\"1.3.1\";s:11:\"description\";s:66:\"The universal-analytics plugin before 1.3.1 for WordPress has XSS.\";s:4:\"refs\";s:198:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/universal-analytics\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/universal-analytics\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:729;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10912\";s:4:\"slug\";s:19:\"universal-analytics\";s:19:\"versionEndExcluding\";s:5:\"1.3.1\";s:11:\"description\";s:66:\"The universal-analytics plugin before 1.3.1 for WordPress has XSS.\";s:4:\"refs\";s:198:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/universal-analytics\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/universal-analytics\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:730;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18585\";s:4:\"slug\";s:13:\"posts-in-page\";s:19:\"versionEndExcluding\";s:5:\"1.3.0\";s:11:\"description\";s:103:\"The posts-in-page plugin before 1.3.0 for WordPress has ic_add_posts template=\'../ directory traversal.\";s:4:\"refs\";s:520:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/posts-in-page\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/posts-in-page\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/www.pluginvulnerabilities.com\\/2017\\/02\\/13\\/authenticated-local-file-inclusion-lfi-vulnerability-in-posts-in-page\\/\",\"name\":\"https:\\/\\/www.pluginvulnerabilities.com\\/2017\\/02\\/13\\/authenticated-local-file-inclusion-lfi-vulnerability-in-posts-in-page\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:731;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-24063\";s:4:\"slug\";s:5:\"canto\";s:19:\"versionEndExcluding\";s:5:\"1.3.0\";s:11:\"description\";s:86:\"The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.\";s:4:\"refs\";s:657:\"[{\"url\":\"https:\\/\\/gist.github.com\\/Hakooraevil\\/264cb21034f946eee62371e9111c36bb\",\"name\":\"https:\\/\\/gist.github.com\\/Hakooraevil\\/264cb21034f946eee62371e9111c36bb\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/github.com\\/CantoDAM\\/Canto-Wordpress-Plugin\",\"name\":\"https:\\/\\/github.com\\/CantoDAM\\/Canto-Wordpress-Plugin\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/canto\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/canto\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.canto.com\\/integrations\\/wordpress\\/\",\"name\":\"https:\\/\\/www.canto.com\\/integrations\\/wordpress\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:732;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18533\";s:4:\"slug\";s:21:\"rimons-twitter-widget\";s:19:\"versionEndExcluding\";s:3:\"1.3\";s:11:\"description\";s:66:\"The rimons-twitter-widget plugin before 1.3 for WordPress has XSS.\";s:4:\"refs\";s:202:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/rimons-twitter-widget\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/rimons-twitter-widget\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:733;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-20971\";s:4:\"slug\";s:12:\"church-admin\";s:19:\"versionEndExcluding\";s:6:\"1.2550\";s:11:\"description\";s:106:\"The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.\";s:4:\"refs\";s:208:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/church-admin\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/church-admin\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:734;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-13125\";s:4:\"slug\";s:18:\"ultimate-elementor\";s:19:\"versionEndExcluding\";s:6:\"1.24.2\";s:11:\"description\";s:273:\"An issue was discovered in the \"Ultimate Addons for Elementor\" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled.\";s:4:\"refs\";s:477:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10214\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10214\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/05\\/combined-attack-on-elementor-pro-and-ultimate-addons-for-elementor-puts-1-million-sites-at-risk\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/05\\/combined-attack-on-elementor-pro-and-ultimate-addons-for-elementor-puts-1-million-sites-at-risk\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:735;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-8771\";s:4:\"slug\";s:15:\"wp-time-capsule\";s:19:\"versionEndExcluding\";s:7:\"1.21.16\";s:11:\"description\";s:215:\"The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of administrator accounts.\";s:4:\"refs\";s:359:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10010\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10010\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.webarxsecurity.com\\/vulnerability-infinitewp-client-wp-time-capsule\\/\",\"name\":\"https:\\/\\/www.webarxsecurity.com\\/vulnerability-infinitewp-client-wp-time-capsule\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:736;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9385\";s:4:\"slug\";s:15:\"quotes-and-tips\";s:19:\"versionEndExcluding\";s:4:\"1.20\";s:11:\"description\";s:61:\"The quotes-and-tips plugin before 1.20 for WordPress has XSS.\";s:4:\"refs\";s:375:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/quotes-and-tips\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/quotes-and-tips\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8359\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8359\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:737;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:42:\"yith-desktop-notifications-for-woocommerce\";s:19:\"versionEndExcluding\";s:5:\"1.2.8\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:738;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-14846\";s:4:\"slug\";s:23:\"Mondula Multi Step Form\";s:19:\"versionEndExcluding\";s:5:\"1.2.8\";s:11:\"description\";s:114:\"The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php.\";s:4:\"refs\";s:779:\"[{\"url\":\"https:\\/\\/ansawaf.blogspot.com\\/2018\\/10\\/cve-2018-14846-multiple-stored-xss-in.html\",\"name\":\"https:\\/\\/ansawaf.blogspot.com\\/2018\\/10\\/cve-2018-14846-multiple-stored-xss-in.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/cwatch.comodo.com\\/blog\\/website-security\\/vulnerability-found-in-multiple-stored-xss-form-in-wordpress-version-1-2-5\\/\",\"name\":\"https:\\/\\/cwatch.comodo.com\\/blog\\/website-security\\/vulnerability-found-in-multiple-stored-xss-form-in-wordpress-version-1-2-5\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9186\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9186\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Patch\",\"Third Party Advisory\"]}]\";}i:739;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9456\";s:4:\"slug\";s:28:\"orbisius-child-theme-creator\";s:19:\"versionEndExcluding\";s:5:\"1.2.8\";s:11:\"description\";s:264:\"The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme_1_file, or theme_1_file_contents parameter.\";s:4:\"refs\";s:647:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_28c91eee00e8e4b5868ebc58b5b1f730.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_28c91eee00e8e4b5868ebc58b5b1f730.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/orbisius-child-theme-creator\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/orbisius-child-theme-creator\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8315\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8315\",\"refsource\":\"CONFIRM\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:740;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9432\";s:4:\"slug\";s:31:\"alpine-photo-tile-for-instagram\";s:19:\"versionEndExcluding\";s:7:\"1.2.7.6\";s:11:\"description\";s:197:\"The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter.\";s:4:\"refs\";s:657:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_8af3902b4f3a5d06304937c7eab1ee35.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_8af3902b4f3a5d06304937c7eab1ee35.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/alpine-photo-tile-for-instagram\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/alpine-photo-tile-for-instagram\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8268\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8268\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:741;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18535\";s:4:\"slug\";s:11:\"smokesignal\";s:19:\"versionEndExcluding\";s:5:\"1.2.7\";s:11:\"description\";s:58:\"The smokesignal plugin before 1.2.7 for WordPress has XSS.\";s:4:\"refs\";s:182:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/smokesignal\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/smokesignal\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:742;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-11004\";s:4:\"slug\";s:22:\"Elegant Themes Monarch\";s:19:\"versionEndExcluding\";s:5:\"1.2.7\";s:11:\"description\";s:86:\"The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation.\";s:4:\"refs\";s:469:\"[{\"url\":\"http:\\/\\/www.pritect.net\\/blog\\/elegant-themes-security-vulnerability\",\"name\":\"http:\\/\\/www.pritect.net\\/blog\\/elegant-themes-security-vulnerability\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wptavern.com\\/critical-security-vulnerability-discovered-in-elegant-themes-products\",\"name\":\"https:\\/\\/wptavern.com\\/critical-security-vulnerability-discovered-in-elegant-themes-products\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:743;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-11004\";s:4:\"slug\";s:22:\"Elegant Themes Monarch\";s:19:\"versionEndExcluding\";s:5:\"1.2.7\";s:11:\"description\";s:86:\"The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation.\";s:4:\"refs\";s:469:\"[{\"url\":\"http:\\/\\/www.pritect.net\\/blog\\/elegant-themes-security-vulnerability\",\"name\":\"http:\\/\\/www.pritect.net\\/blog\\/elegant-themes-security-vulnerability\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wptavern.com\\/critical-security-vulnerability-discovered-in-elegant-themes-products\",\"name\":\"https:\\/\\/wptavern.com\\/critical-security-vulnerability-discovered-in-elegant-themes-products\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:744;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-20963\";s:4:\"slug\";s:21:\"contact-form-to-email\";s:19:\"versionEndExcluding\";s:6:\"1.2.66\";s:11:\"description\";s:69:\"The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.\";s:4:\"refs\";s:209:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-to-email\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-to-email\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:745;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-20964\";s:4:\"slug\";s:21:\"contact-form-to-email\";s:19:\"versionEndExcluding\";s:6:\"1.2.66\";s:11:\"description\";s:70:\"The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.\";s:4:\"refs\";s:209:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-to-email\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-to-email\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:746;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2019-9646\";s:4:\"slug\";s:21:\"contact-form-to-email\";s:19:\"versionEndExcluding\";s:6:\"1.2.66\";s:11:\"description\";s:163:\"The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the \"custom edition area.\"\";s:4:\"refs\";s:692:\"[{\"url\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/02\\/05\\/7\",\"name\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/02\\/05\\/7\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/security-consulting.icu\\/blog\\/2019\\/02\\/wordpress-contact-form-email-xss-csrf\\/\",\"name\":\"https:\\/\\/security-consulting.icu\\/blog\\/2019\\/02\\/wordpress-contact-form-email-xss-csrf\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-to-email\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-to-email\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:747;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10877\";s:4:\"slug\";s:9:\"wp-editor\";s:19:\"versionEndExcluding\";s:7:\"1.2.6.3\";s:11:\"description\";s:74:\"The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:196:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]\";}i:748;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10877\";s:4:\"slug\";s:9:\"wp-editor\";s:19:\"versionEndExcluding\";s:7:\"1.2.6.3\";s:11:\"description\";s:74:\"The wp-editor plugin before 1.2.6.3 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:196:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]\";}i:749;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10736\";s:4:\"slug\";s:40:\"\"Social Pug - Easy Social Share Buttons\"\";s:19:\"versionEndExcluding\";s:5:\"1.2.6\";s:11:\"description\";s:164:\"The \"Social Pug - Easy Social Share Buttons\" plugin before 1.2.6 for WordPress allows XSS via the wp-admin/admin.php?page=dpsp-toolkit dpsp_message_class parameter.\";s:4:\"refs\";s:405:\"[{\"url\":\"https:\\/\\/advisories.dxw.com\\/advisories\\/reflected-xss-in-social-pug-easy-social-share-buttons-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can\\/\",\"name\":\"https:\\/\\/advisories.dxw.com\\/advisories\\/reflected-xss-in-social-pug-easy-social-share-buttons-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:750;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:44:\"yith-paypal-express-checkout-for-woocommerce\";s:19:\"versionEndExcluding\";s:5:\"1.2.6\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:751;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10885\";s:4:\"slug\";s:9:\"wp-editor\";s:19:\"versionEndExcluding\";s:5:\"1.2.6\";s:11:\"description\";s:57:\"The wp-editor plugin before 1.2.6 for WordPress has CSRF.\";s:4:\"refs\";s:178:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:752;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10885\";s:4:\"slug\";s:9:\"wp-editor\";s:19:\"versionEndExcluding\";s:5:\"1.2.6\";s:11:\"description\";s:57:\"The wp-editor plugin before 1.2.6 for WordPress has CSRF.\";s:4:\"refs\";s:178:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:753;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10886\";s:4:\"slug\";s:9:\"wp-editor\";s:19:\"versionEndExcluding\";s:5:\"1.2.6\";s:11:\"description\";s:74:\"The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.\";s:4:\"refs\";s:202:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:754;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10886\";s:4:\"slug\";s:9:\"wp-editor\";s:19:\"versionEndExcluding\";s:5:\"1.2.6\";s:11:\"description\";s:74:\"The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.\";s:4:\"refs\";s:202:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-editor\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:755;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18575\";s:4:\"slug\";s:12:\"newstatpress\";s:19:\"versionEndExcluding\";s:5:\"1.2.5\";s:11:\"description\";s:82:\"The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues.\";s:4:\"refs\";s:207:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:756;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2014-10382\";s:4:\"slug\";s:16:\"feature-comments\";s:19:\"versionEndExcluding\";s:5:\"1.2.5\";s:11:\"description\";s:99:\"The feature-comments plugin before 1.2.5 for WordPress has CSRF for featuring or burying a comment.\";s:4:\"refs\";s:192:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/feature-comments\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/feature-comments\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:757;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15776\";s:4:\"slug\";s:40:\"simple-301-redirects-addon-bulk-uploader\";s:19:\"versionEndExcluding\";s:5:\"1.2.5\";s:11:\"description\";s:148:\"The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file.\";s:4:\"refs\";s:697:\"[{\"url\":\"https:\\/\\/threatpost.com\\/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn\\/147671\\/\",\"name\":\"https:\\/\\/threatpost.com\\/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn\\/147671\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-301-redirects-addon-bulk-uploader\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-301-redirects-addon-bulk-uploader\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9503\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9503\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:758;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15818\";s:4:\"slug\";s:40:\"simple-301-redirects-addon-bulk-uploader\";s:19:\"versionEndExcluding\";s:5:\"1.2.5\";s:11:\"description\";s:170:\"The simple-301-redirects-addon-bulk-uploader plugin through 1.2.4 for WordPress has no requirement for authentication for action=bulk301export or action=bulk301clearlist.\";s:4:\"refs\";s:749:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/unauthenticated-option-changes-in-wordpress-simple-301-redirects-addon-bulk-uploader-plugin\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/unauthenticated-option-changes-in-wordpress-simple-301-redirects-addon-bulk-uploader-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-301-redirects-addon-bulk-uploader\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-301-redirects-addon-bulk-uploader\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9503\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9503\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:759;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9380\";s:4:\"slug\";s:13:\"photo-gallery\";s:19:\"versionEndExcluding\";s:6:\"1.2.42\";s:11:\"description\";s:62:\"The photo-gallery plugin before 1.2.42 for WordPress has CSRF.\";s:4:\"refs\";s:614:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/photo-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/support\\/topic\\/this-plugin-is-reported-as-vulnerable\\/\",\"name\":\"https:\\/\\/wordpress.org\\/support\\/topic\\/this-plugin-is-reported-as-vulnerable\\/\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7225\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7225\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:760;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15895\";s:4:\"slug\";s:14:\"search-exclude\";s:19:\"versionEndExcluding\";s:5:\"1.2.4\";s:11:\"description\";s:116:\"search-exclude.php in the \"Search Exclude\" plugin before 1.2.4 for WordPress allows unauthenticated options changes.\";s:4:\"refs\";s:594:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/settings-change-vulnerability-in-wordpress-search-exclude-plugin\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/settings-change-vulnerability-in-wordpress-search-exclude-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/search-exclude\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/search-exclude\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9870\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9870\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:761;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9342\";s:4:\"slug\";s:11:\"wp-rollback\";s:19:\"versionEndExcluding\";s:5:\"1.2.3\";s:11:\"description\";s:58:\"The wp-rollback plugin before 1.2.3 for WordPress has XSS.\";s:4:\"refs\";s:182:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-rollback\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-rollback\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:762;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9343\";s:4:\"slug\";s:11:\"wp-rollback\";s:19:\"versionEndExcluding\";s:5:\"1.2.3\";s:11:\"description\";s:59:\"The wp-rollback plugin before 1.2.3 for WordPress has CSRF.\";s:4:\"refs\";s:182:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-rollback\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-rollback\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:763;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-20984\";s:4:\"slug\";s:15:\"patreon-connect\";s:19:\"versionEndExcluding\";s:5:\"1.2.2\";s:11:\"description\";s:75:\"The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.\";s:4:\"refs\";s:190:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/patreon-connect\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/patreon-connect\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:764;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-14063\";s:4:\"slug\";s:20:\"tc-custom-javascript\";s:19:\"versionEndExcluding\";s:5:\"1.2.2\";s:11:\"description\";s:316:\"A stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin before 1.2.2 for WordPress allows unauthenticated remote attackers to inject arbitrary JavaScript via the tccj-content parameter. This is displayed in the page footer of every front-end page and executed in the browser of visitors.\";s:4:\"refs\";s:447:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/tc-custom-javascript\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/tc-custom-javascript\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/07\\/high-severity-vulnerability-patched-in-tc-custom-javascript\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/07\\/high-severity-vulnerability-patched-in-tc-custom-javascript\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:765;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15114\";s:4:\"slug\";s:22:\"formcraft-form-builder\";s:19:\"versionEndExcluding\";s:5:\"1.2.2\";s:11:\"description\";s:70:\"The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF.\";s:4:\"refs\";s:228:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/formcraft-form-builder\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/formcraft-form-builder\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:766;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2012-6718\";s:4:\"slug\";s:8:\"sharebar\";s:19:\"versionEndExcluding\";s:5:\"1.2.2\";s:11:\"description\";s:93:\"The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491.\";s:4:\"refs\";s:199:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/sharebar\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/sharebar\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:767;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2012-6719\";s:4:\"slug\";s:8:\"sharebar\";s:19:\"versionEndExcluding\";s:5:\"1.2.2\";s:11:\"description\";s:65:\"The sharebar plugin before 1.2.2 for WordPress has SQL injection.\";s:4:\"refs\";s:199:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/sharebar\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/sharebar\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:768;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:37:\"yith-woocommerce-bulk-product-editing\";s:19:\"versionEndExcluding\";s:6:\"1.2.15\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:769;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:28:\"yith-woocommerce-pdf-invoice\";s:19:\"versionEndExcluding\";s:6:\"1.2.13\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:770;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:31:\"yith-woocommerce-order-tracking\";s:19:\"versionEndExcluding\";s:6:\"1.2.11\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:771;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:43:\"yith-woocommerce-frequently-bought-together\";s:19:\"versionEndExcluding\";s:6:\"1.2.11\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:772;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18564\";s:4:\"slug\";s:6:\"sender\";s:19:\"versionEndExcluding\";s:5:\"1.2.1\";s:11:\"description\";s:69:\"The sender plugin before 1.2.1 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:172:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/sender\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/sender\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:773;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18576\";s:4:\"slug\";s:14:\"event-notifier\";s:19:\"versionEndExcluding\";s:5:\"1.2.1\";s:11:\"description\";s:87:\"The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation.\";s:4:\"refs\";s:188:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/event-notifier\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/event-notifier\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:774;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:30:\"yith-pre-order-for-woocommerce\";s:19:\"versionEndExcluding\";s:5:\"1.2.1\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:775;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18490\";s:4:\"slug\";s:18:\"contact-form-multi\";s:19:\"versionEndExcluding\";s:5:\"1.2.1\";s:11:\"description\";s:81:\"The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:219:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-multi\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-multi\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:776;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2014-10394\";s:4:\"slug\";s:12:\"rich-counter\";s:19:\"versionEndExcluding\";s:5:\"1.2.0\";s:11:\"description\";s:100:\"The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header.\";s:4:\"refs\";s:184:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/rich-counter\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/rich-counter\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:777;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:38:\"yith-woocommerce-questions-and-answers\";s:19:\"versionEndExcluding\";s:5:\"1.2.0\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:778;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15820\";s:4:\"slug\";s:25:\"login-or-logout-menu-item\";s:19:\"versionEndExcluding\";s:5:\"1.2.0\";s:11:\"description\";s:122:\"The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmi_save_settings authentication.\";s:4:\"refs\";s:689:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/unauthenticated-options-change-in-wordpress-login-or-logout-menu-item-plugin\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/unauthenticated-options-change-in-wordpress-login-or-logout-menu-item-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/login-or-logout-menu-item\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/login-or-logout-menu-item\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9500\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9500\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:779;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-15811\";s:4:\"slug\";s:13:\"Pootle Button\";s:19:\"versionEndExcluding\";s:5:\"1.2.0\";s:11:\"description\";s:151:\"The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php.\";s:4:\"refs\";s:695:\"[{\"url\":\"https:\\/\\/packetstormsecurity.com\\/files\\/144582\\/WordPress-Pootle-Button-1.1.1-Cross-Site-Scripting.html\",\"name\":\"https:\\/\\/packetstormsecurity.com\\/files\\/144582\\/WordPress-Pootle-Button-1.1.1-Cross-Site-Scripting.html\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/1745805\\/pootle-button\\/tags\\/\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/1745805\\/pootle-button\\/tags\\/\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8930\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8930\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:780;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9429\";s:4:\"slug\";s:21:\"yith-maintenance-mode\";s:19:\"versionEndExcluding\";s:5:\"1.2.0\";s:11:\"description\";s:164:\"The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panel_page parameter.\";s:4:\"refs\";s:637:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_3a14a77571c73684103e0f517a92d757.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_3a14a77571c73684103e0f517a92d757.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/yith-maintenance-mode\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/yith-maintenance-mode\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8285\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8285\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:781;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2019-7412\";s:4:\"slug\";s:13:\"ps-phpcaptcha\";s:19:\"versionEndExcluding\";s:5:\"1.2.0\";s:11:\"description\";s:96:\"The PS PHPCaptcha WP plugin before v1.2.0 for WordPress mishandles sanitization of input values.\";s:4:\"refs\";s:533:\"[{\"url\":\"https:\\/\\/metamorfosec.com\\/Files\\/Advisories\\/METS-2019-003-Denial_of_Service_in_PS_PHPCaptcha_WP_before_v1.2.0.txt\",\"name\":\"https:\\/\\/metamorfosec.com\\/Files\\/Advisories\\/METS-2019-003-Denial_of_Service_in_PS_PHPCaptcha_WP_before_v1.2.0.txt\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ps-phpcaptcha\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ps-phpcaptcha\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\",\"Third Party Advisory\"]}]\";}i:782;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10976\";s:4:\"slug\";s:11:\"safe-editor\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:98:\"The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS.\";s:4:\"refs\";s:348:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/safe-editor\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/safe-editor\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8497\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8497\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:783;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10976\";s:4:\"slug\";s:11:\"safe-editor\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:98:\"The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS.\";s:4:\"refs\";s:348:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/safe-editor\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/safe-editor\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8497\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8497\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:784;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10984\";s:4:\"slug\";s:8:\"echosign\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:84:\"The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.\";s:4:\"refs\";s:618:\"[{\"url\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/echosign-plugin-for-wordpress-xss-vulnerability\\/\",\"name\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/echosign-plugin-for-wordpress-xss-vulnerability\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/echosign\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/echosign\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8465\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8465\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:785;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10984\";s:4:\"slug\";s:8:\"echosign\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:84:\"The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.\";s:4:\"refs\";s:618:\"[{\"url\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/echosign-plugin-for-wordpress-xss-vulnerability\\/\",\"name\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/echosign-plugin-for-wordpress-xss-vulnerability\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/echosign\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/echosign\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8465\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8465\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:786;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10985\";s:4:\"slug\";s:8:\"echosign\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:102:\"The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.\";s:4:\"refs\";s:618:\"[{\"url\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/echosign-plugin-for-wordpress-xss-vulnerability\\/\",\"name\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/echosign-plugin-for-wordpress-xss-vulnerability\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/echosign\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/echosign\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8465\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8465\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:787;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10985\";s:4:\"slug\";s:8:\"echosign\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:102:\"The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.\";s:4:\"refs\";s:618:\"[{\"url\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/echosign-plugin-for-wordpress-xss-vulnerability\\/\",\"name\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/echosign-plugin-for-wordpress-xss-vulnerability\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/echosign\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/echosign\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8465\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8465\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:788;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2013-7476\";s:4:\"slug\";s:13:\"simple-fields\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:82:\"The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface.\";s:4:\"refs\";s:210:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-fields\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-fields\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:789;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2011-5328\";s:4:\"slug\";s:19:\"user-access-manager\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:65:\"The user-access-manager plugin before 1.2 for WordPress has CSRF.\";s:4:\"refs\";s:198:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/user-access-manager\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/user-access-manager\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:790;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9332\";s:4:\"slug\";s:9:\"uninstall\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:129:\"The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI.\";s:4:\"refs\";s:178:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/uninstall\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/uninstall\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:791;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2014-3844\";s:4:\"slug\";s:20:\"TinyMCE Color Picker\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:246:\"The TinyMCE Color Picker plugin before 1.2 for WordPress does not properly check permissions, which allows remote attackers to modify plugin settings via unspecified vectors.  NOTE: some of these details are obtained from third party information.\";s:4:\"refs\";s:274:\"[{\"url\":\"http:\\/\\/secunia.com\\/advisories\\/58095\",\"name\":\"58095\",\"refsource\":\"SECUNIA\",\"tags\":[]},{\"url\":\"http:\\/\\/wordpress.org\\/plugins\\/tinymce-colorpicker\\/changelog\",\"name\":\"http:\\/\\/wordpress.org\\/plugins\\/tinymce-colorpicker\\/changelog\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:792;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-35135\";s:4:\"slug\";s:26:\"ultimate-category-excluder\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:106:\"The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF.\";s:4:\"refs\";s:359:\"[{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2434070\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2434070\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-category-excluder\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ultimate-category-excluder\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:793;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15822\";s:4:\"slug\";s:25:\"wps-child-theme-generator\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:106:\"The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal.\";s:4:\"refs\";s:637:\"[{\"url\":\"https:\\/\\/secupress.me\\/blog\\/wps-child-theme-generator-v1-1-multiples-vulnerabilities\\/\",\"name\":\"https:\\/\\/secupress.me\\/blog\\/wps-child-theme-generator-v1-1-multiples-vulnerabilities\\/\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-child-theme-generator\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-child-theme-generator\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9470\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9470\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:794;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10924\";s:4:\"slug\";s:14:\"ebook-download\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:75:\"The ebook-download plugin before 1.2 for WordPress has directory traversal.\";s:4:\"refs\";s:188:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ebook-download\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ebook-download\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:795;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10924\";s:4:\"slug\";s:14:\"ebook-download\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:75:\"The ebook-download plugin before 1.2 for WordPress has directory traversal.\";s:4:\"refs\";s:188:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ebook-download\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ebook-download\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:796;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9448\";s:4:\"slug\";s:9:\"sendpress\";s:19:\"versionEndExcluding\";s:3:\"1.2\";s:11:\"description\";s:122:\"The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter.\";s:4:\"refs\";s:596:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_8a2f7613577ea8e613ec274aeec14527.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_8a2f7613577ea8e613ec274aeec14527.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/sendpress\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/sendpress\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8324\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8324\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:797;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15827\";s:4:\"slug\";s:37:\"onesignal-free-web-push-notifications\";s:19:\"versionEndExcluding\";s:6:\"1.17.8\";s:11:\"description\";s:113:\"The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter.\";s:4:\"refs\";s:631:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/onesignal-free-web-push-notifications\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/onesignal-free-web-push-notifications\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9478\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9478\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.zeroscience.mk\\/en\\/vulnerabilities\\/ZSL-2019-5530.php\",\"name\":\"https:\\/\\/www.zeroscience.mk\\/en\\/vulnerabilities\\/ZSL-2019-5530.php\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:798;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10949\";s:4:\"slug\";s:18:\"Relevanssi Premium\";s:19:\"versionEndExcluding\";s:8:\"1.14.6.1\";s:11:\"description\";s:116:\"The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization.\";s:4:\"refs\";s:443:\"[{\"url\":\"https:\\/\\/advisories.dxw.com\\/advisories\\/sql-injection-and-unserialization-vulnerability-in-relevanssi-premium-could-allow-admins-to-execute-arbitrary-code-in-some-circumstances\\/\",\"name\":\"https:\\/\\/advisories.dxw.com\\/advisories\\/sql-injection-and-unserialization-vulnerability-in-relevanssi-premium-could-allow-admins-to-execute-arbitrary-code-in-some-circumstances\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:799;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10949\";s:4:\"slug\";s:18:\"Relevanssi Premium\";s:19:\"versionEndExcluding\";s:8:\"1.14.6.1\";s:11:\"description\";s:116:\"The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization.\";s:4:\"refs\";s:443:\"[{\"url\":\"https:\\/\\/advisories.dxw.com\\/advisories\\/sql-injection-and-unserialization-vulnerability-in-relevanssi-premium-could-allow-admins-to-execute-arbitrary-code-in-some-circumstances\\/\",\"name\":\"https:\\/\\/advisories.dxw.com\\/advisories\\/sql-injection-and-unserialization-vulnerability-in-relevanssi-premium-could-allow-admins-to-execute-arbitrary-code-in-some-circumstances\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:800;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15326\";s:4:\"slug\";s:31:\"import-users-from-csv-with-meta\";s:19:\"versionEndExcluding\";s:8:\"1.14.2.1\";s:11:\"description\";s:97:\"The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.\";s:4:\"refs\";s:384:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/import-users-from-csv-with-meta\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/import-users-from-csv-with-meta\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9392\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9392\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:801;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15327\";s:4:\"slug\";s:31:\"import-users-from-csv-with-meta\";s:19:\"versionEndExcluding\";s:8:\"1.14.1.3\";s:11:\"description\";s:99:\"The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data.\";s:4:\"refs\";s:222:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/import-users-from-csv-with-meta\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/import-users-from-csv-with-meta\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:802;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15328\";s:4:\"slug\";s:31:\"import-users-from-csv-with-meta\";s:19:\"versionEndExcluding\";s:8:\"1.14.0.3\";s:11:\"description\";s:81:\"The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS.\";s:4:\"refs\";s:474:\"[{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/browser\\/import-users-from-csv-with-meta?rev=2050450\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/browser\\/import-users-from-csv-with-meta?rev=2050450\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/import-users-from-csv-with-meta\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/import-users-from-csv-with-meta\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:803;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15329\";s:4:\"slug\";s:31:\"import-users-from-csv-with-meta\";s:19:\"versionEndExcluding\";s:8:\"1.14.0.3\";s:11:\"description\";s:82:\"The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF.\";s:4:\"refs\";s:474:\"[{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/browser\\/import-users-from-csv-with-meta?rev=2050450\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/browser\\/import-users-from-csv-with-meta?rev=2050450\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/import-users-from-csv-with-meta\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/import-users-from-csv-with-meta\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:804;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-11590\";s:4:\"slug\";s:16:\"10Web Form Maker\";s:19:\"versionEndExcluding\";s:6:\"1.13.5\";s:11:\"description\";s:310:\"The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST[\'action\'] value and the $_GET[\'action\'] value, and the latter is unsanitized.\";s:4:\"refs\";s:596:\"[{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2019\\/Apr\\/36\",\"name\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2019\\/Apr\\/36\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/04\\/05\\/11\",\"name\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/04\\/05\\/11\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/form-maker\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/form-maker\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:805;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-11591\";s:4:\"slug\";s:22:\"WebDorado Contact Form\";s:19:\"versionEndExcluding\";s:6:\"1.13.5\";s:11:\"description\";s:316:\"The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST[\'action\'] value and the $_GET[\'action\'] value, and the latter is unsanitized.\";s:4:\"refs\";s:752:\"[{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2019\\/Apr\\/37\",\"name\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2019\\/Apr\\/37\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/04\\/05\\/12\",\"name\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/04\\/05\\/12\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-maker\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/contact-form-maker\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9252\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9252\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:806;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18593\";s:4:\"slug\";s:11:\"updraftplus\";s:19:\"versionEndExcluding\";s:6:\"1.13.5\";s:11:\"description\";s:130:\"The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file.\";s:4:\"refs\";s:189:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/updraftplus\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/updraftplus\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:807;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-10866\";s:4:\"slug\";s:10:\"form-maker\";s:19:\"versionEndExcluding\";s:6:\"1.13.3\";s:11:\"description\";s:243:\"In the Form Maker plugin before 1.13.3 for WordPress, it\'s possible to achieve SQL injection in the function get_labels_parameters in the file form-maker/admin/models/Submissions_fm.php with a crafted value of the /models/Submissioc parameter.\";s:4:\"refs\";s:542:\"[{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2019\\/May\\/8\",\"name\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2019\\/May\\/8\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/form-maker\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/form-maker\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9286\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9286\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:808;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-0890\";s:4:\"slug\";s:42:\"BestWebSoft Google Captcha (aka reCAPTCHA)\";s:19:\"versionEndExcluding\";s:4:\"1.13\";s:11:\"description\";s:204:\"The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors.\";s:4:\"refs\";s:434:\"[{\"url\":\"http:\\/\\/jvn.jp\\/en\\/jp\\/JVN55063777\\/index.html\",\"name\":\"JVN#55063777\",\"refsource\":\"JVN\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http:\\/\\/jvndb.jvn.jp\\/jvndb\\/JVNDB-2015-000030\",\"name\":\"JVNDB-2015-000030\",\"refsource\":\"JVNDB\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/google-captcha\\/changelog\\/\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/google-captcha\\/changelog\\/\",\"refsource\":\"CONFIRM\",\"tags\":[]}]\";}i:809;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15832\";s:4:\"slug\";s:37:\"visitors-traffic-real-time-statistics\";s:19:\"versionEndExcluding\";s:4:\"1.13\";s:11:\"description\";s:84:\"The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF.\";s:4:\"refs\";s:429:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/visitors-traffic-real-time-statistics\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/visitors-traffic-real-time-statistics\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9420\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9420\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:810;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-15812\";s:4:\"slug\";s:17:\"Easy Appointments\";s:19:\"versionEndExcluding\";s:6:\"1.12.0\";s:11:\"description\";s:106:\"The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel.\";s:4:\"refs\";s:357:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/easy-appointments\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/easy-appointments\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8937\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8937\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:811;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15831\";s:4:\"slug\";s:37:\"visitors-traffic-real-time-statistics\";s:19:\"versionEndExcluding\";s:4:\"1.12\";s:11:\"description\";s:105:\"The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page.\";s:4:\"refs\";s:419:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/visitors-traffic-real-time-statistics\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/visitors-traffic-real-time-statistics\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9420\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9420\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:812;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16521\";s:4:\"slug\";s:19:\"broken-link-checker\";s:19:\"versionEndExcluding\";s:6:\"1.11.9\";s:11:\"description\";s:402:\"The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected broken links can be exploited by providing an XSS payload in the s_filter GET parameter in a filter_id=search request. NOTE: this is an end-of-life product.\";s:4:\"refs\";s:992:\"[{\"url\":\"http:\\/\\/www.openwall.com\\/lists\\/oss-security\\/2019\\/10\\/16\\/3\",\"name\":\"[oss-security] 20191016 [SBA-ADV-20190913-02] CVE-2019-16521: WordPress Plugin - Broken Link Checker <= 1.11.8 - Reflected XSS\",\"refsource\":\"MLIST\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/github.com\\/sbaresearch\\/advisories\\/tree\\/public\\/2019\\/SBA-ADV-20190913-02_WordPress_Plugin_Broken_Link_Checker\",\"name\":\"https:\\/\\/github.com\\/sbaresearch\\/advisories\\/tree\\/public\\/2019\\/SBA-ADV-20190913-02_WordPress_Plugin_Broken_Link_Checker\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/broken-link-checker\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/broken-link-checker\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9917\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9917\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:813;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-17207\";s:4:\"slug\";s:19:\"broken-link-checker\";s:19:\"versionEndExcluding\";s:6:\"1.11.9\";s:11:\"description\";s:344:\"A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the wp-admin/tools.php?page=view-broken-links s_filter parameter in a search action.\";s:4:\"refs\";s:905:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/154875\\/WordPress-Broken-Link-Checker-1.11.8-Cross-Site-Scripting.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/154875\\/WordPress-Broken-Link-Checker-1.11.8-Cross-Site-Scripting.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2019\\/Oct\\/31\",\"name\":\"20191015 Reflected XSS via Broken Link Checker v.1.11.8 WordPress Plugin\",\"refsource\":\"FULLDISC\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/broken-link-checker\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/broken-link-checker\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9917\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9917\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:814;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9426\";s:4:\"slug\";s:17:\"manual-image-crop\";s:19:\"versionEndExcluding\";s:4:\"1.11\";s:11:\"description\";s:157:\"The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=mic_editor_window postId parameter.\";s:4:\"refs\";s:629:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_7c87194ce1dcf0642135d17a71ed91cd.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_7c87194ce1dcf0642135d17a71ed91cd.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/manual-image-crop\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/manual-image-crop\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8297\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8297\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:815;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-14071\";s:4:\"slug\";s:10:\"geo-mashup\";s:19:\"versionEndExcluding\";s:6:\"1.10.4\";s:11:\"description\";s:116:\"The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.\";s:4:\"refs\";s:731:\"[{\"url\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/blob\\/master\\/readme.txt\",\"name\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/blob\\/master\\/readme.txt\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/commit\\/838e2fe15a2328f5ae3dfc75d90e420509286f2f\",\"name\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/commit\\/838e2fe15a2328f5ae3dfc75d90e420509286f2f\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/issues\\/817\",\"name\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/issues\\/817\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:816;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-14071\";s:4:\"slug\";s:10:\"geo-mashup\";s:19:\"versionEndExcluding\";s:6:\"1.10.4\";s:11:\"description\";s:116:\"The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.\";s:4:\"refs\";s:731:\"[{\"url\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/blob\\/master\\/readme.txt\",\"name\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/blob\\/master\\/readme.txt\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/commit\\/838e2fe15a2328f5ae3dfc75d90e420509286f2f\",\"name\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/commit\\/838e2fe15a2328f5ae3dfc75d90e420509286f2f\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/issues\\/817\",\"name\":\"https:\\/\\/github.com\\/cyberhobo\\/wordpress-geo-mashup\\/issues\\/817\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:817;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15830\";s:4:\"slug\";s:7:\"icegram\";s:19:\"versionEndExcluding\";s:7:\"1.10.29\";s:11:\"description\";s:68:\"The icegram plugin before 1.10.29 for WordPress has ig_cat_list XSS.\";s:4:\"refs\";s:593:\"[{\"url\":\"https:\\/\\/blog.sucuri.net\\/2019\\/07\\/icegram-persistent-cross-site-scripting.html\",\"name\":\"https:\\/\\/blog.sucuri.net\\/2019\\/07\\/icegram-persistent-cross-site-scripting.html\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/icegram\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/icegram\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9440\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9440\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:818;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2018-5658\";s:4:\"slug\";s:27:\"responsive-coming-soon-page\";s:19:\"versionEndExcluding\";s:5:\"1.1.9\";s:11:\"description\";s:175:\"An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. CSRF exists via wp-admin/admin.php.\r\n\r\nRef: https://wpvulndb.com//vulnerabilities//9322\";s:4:\"refs\";s:441:\"[{\"url\":\"https:\\/\\/github.com\\/d4wner\\/Vulnerabilities-Report\\/blob\\/master\\/responsive-coming-soon-page.md\",\"name\":\"https:\\/\\/github.com\\/d4wner\\/Vulnerabilities-Report\\/blob\\/master\\/responsive-coming-soon-page.md\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9010\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9010\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:819;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9421\";s:4:\"slug\";s:20:\"olevmedia-shortcodes\";s:19:\"versionEndExcluding\";s:5:\"1.1.9\";s:11:\"description\";s:150:\"The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.\";s:4:\"refs\";s:635:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_d9e466122cd9a6ca27db840cca277cdb.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_d9e466122cd9a6ca27db840cca277cdb.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/olevmedia-shortcodes\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/olevmedia-shortcodes\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8338\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8338\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:820;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16525\";s:4:\"slug\";s:9:\"checklist\";s:19:\"versionEndExcluding\";s:5:\"1.1.9\";s:11:\"description\";s:202:\"An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript code.\";s:4:\"refs\";s:842:\"[{\"url\":\"https:\\/\\/packetstormsecurity.com\\/files\\/154436\\/WordPress-Checklist-1.1.5-Cross-Site-Scripting.html\",\"name\":\"https:\\/\\/packetstormsecurity.com\\/files\\/154436\\/WordPress-Checklist-1.1.5-Cross-Site-Scripting.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2155029\\/\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/2155029\\/\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/checklist\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/checklist\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9877\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9877\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:821;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-7104\";s:4:\"slug\";s:12:\"chained-quiz\";s:19:\"versionEndExcluding\";s:7:\"1.1.8.2\";s:11:\"description\";s:122:\"The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter.\";s:4:\"refs\";s:143:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10029\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10029\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:822;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:42:\"yith-custom-thank-you-page-for-woocommerce\";s:19:\"versionEndExcluding\";s:5:\"1.1.8\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:823;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18512\";s:4:\"slug\";s:23:\"newsletter-by-supsystic\";s:19:\"versionEndExcluding\";s:5:\"1.1.8\";s:11:\"description\";s:71:\"The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.\";s:4:\"refs\";s:230:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/newsletter-by-supsystic\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/newsletter-by-supsystic\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:824;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2014-10380\";s:4:\"slug\";s:15:\"profile-builder\";s:19:\"versionEndExcluding\";s:6:\"1.1.66\";s:11:\"description\";s:88:\"The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.\";s:4:\"refs\";s:190:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/profile-builder\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/profile-builder\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:825;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-14092\";s:4:\"slug\";s:27:\"payment-form-for-paypal-pro\";s:19:\"versionEndExcluding\";s:6:\"1.1.65\";s:11:\"description\";s:99:\"The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.\";s:4:\"refs\";s:529:\"[{\"url\":\"https:\\/\\/wordpress.dwbooster.com\\/forms\\/payment-form-for-paypal-pro\",\"name\":\"https:\\/\\/wordpress.dwbooster.com\\/forms\\/payment-form-for-paypal-pro\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/payment-form-for-paypal-pro\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/payment-form-for-paypal-pro\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10287\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10287\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:826;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-21005\";s:4:\"slug\";s:15:\"bbp-move-topics\";s:19:\"versionEndExcluding\";s:5:\"1.1.6\";s:11:\"description\";s:73:\"The bbp-move-topics plugin before 1.1.6 for WordPress has code injection.\";s:4:\"refs\";s:190:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/bbp-move-topics\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/bbp-move-topics\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:827;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-21006\";s:4:\"slug\";s:15:\"bbp-move-topics\";s:19:\"versionEndExcluding\";s:5:\"1.1.6\";s:11:\"description\";s:63:\"The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF.\";s:4:\"refs\";s:190:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/bbp-move-topics\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/bbp-move-topics\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:828;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9233\";s:4:\"slug\";s:61:\"cp-contact-form-with-paypal (aka CP Contact Form with PayPal)\";s:19:\"versionEndExcluding\";s:5:\"1.1.6\";s:11:\"description\";s:205:\"The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cp_contactformpp.php and cp_contactformpp_admin_int_list.inc.php.\";s:4:\"refs\";s:615:\"[{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2015\\/Jul\\/49\",\"name\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2015\\/Jul\\/49\",\"refsource\":\"MISC\",\"tags\":[\"Mailing List\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http:\\/\\/seclists.org\\/oss-sec\\/2015\\/q3\\/88\",\"name\":\"http:\\/\\/seclists.org\\/oss-sec\\/2015\\/q3\\/88\",\"refsource\":\"MISC\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/cp-contact-form-with-paypal\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/cp-contact-form-with-paypal\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:829;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9234\";s:4:\"slug\";s:27:\"cp-contact-form-with-paypal\";s:19:\"versionEndExcluding\";s:5:\"1.1.6\";s:11:\"description\";s:180:\"The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has SQL injection via the cp_contactformpp_id parameter to cp_contactformpp.php.\";s:4:\"refs\";s:615:\"[{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2015\\/Jul\\/49\",\"name\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2015\\/Jul\\/49\",\"refsource\":\"MISC\",\"tags\":[\"Mailing List\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http:\\/\\/seclists.org\\/oss-sec\\/2015\\/q3\\/88\",\"name\":\"http:\\/\\/seclists.org\\/oss-sec\\/2015\\/q3\\/88\",\"refsource\":\"MISC\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/cp-contact-form-with-paypal\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/cp-contact-form-with-paypal\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:830;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10978\";s:4:\"slug\";s:17:\"fossura-tag-miner\";s:19:\"versionEndExcluding\";s:5:\"1.1.5\";s:11:\"description\";s:65:\"The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF.\";s:4:\"refs\";s:356:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/fossura-tag-miner\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/fossura-tag-miner\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8486\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8486\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:831;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10978\";s:4:\"slug\";s:17:\"fossura-tag-miner\";s:19:\"versionEndExcluding\";s:5:\"1.1.5\";s:11:\"description\";s:65:\"The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF.\";s:4:\"refs\";s:356:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/fossura-tag-miner\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/fossura-tag-miner\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8486\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8486\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:832;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10979\";s:4:\"slug\";s:17:\"fossura-tag-miner\";s:19:\"versionEndExcluding\";s:5:\"1.1.5\";s:11:\"description\";s:64:\"The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS.\";s:4:\"refs\";s:194:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/fossura-tag-miner\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/fossura-tag-miner\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:833;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10979\";s:4:\"slug\";s:17:\"fossura-tag-miner\";s:19:\"versionEndExcluding\";s:5:\"1.1.5\";s:11:\"description\";s:64:\"The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS.\";s:4:\"refs\";s:194:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/fossura-tag-miner\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/fossura-tag-miner\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:834;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-17947\";s:4:\"slug\";s:11:\"Snazzy Maps\";s:19:\"versionEndExcluding\";s:5:\"1.1.5\";s:11:\"description\";s:88:\"The Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter.\";s:4:\"refs\";s:672:\"[{\"url\":\"http:\\/\\/www.defensecode.com\\/advisories\\/DC-2018-05-006_WordPress_Snazzy_Maps_Plugin_Advisory.pdf\",\"name\":\"http:\\/\\/www.defensecode.com\\/advisories\\/DC-2018-05-006_WordPress_Snazzy_Maps_Plugin_Advisory.pdf\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/seclists.org\\/bugtraq\\/2018\\/Jul\\/72\",\"name\":\"https:\\/\\/seclists.org\\/bugtraq\\/2018\\/Jul\\/72\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/snazzy-maps\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/snazzy-maps\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:835;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18488\";s:4:\"slug\";s:12:\"Backup Guard\";s:19:\"versionEndExcluding\";s:6:\"1.1.47\";s:11:\"description\";s:76:\"The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:179:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/backup\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/backup\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:836;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15829\";s:4:\"slug\";s:24:\"photoblocks-grid-gallery\";s:19:\"versionEndExcluding\";s:6:\"1.1.43\";s:11:\"description\";s:117:\"The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page=photoblocks-edit&id= XSS.\";s:4:\"refs\";s:377:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/photoblocks-grid-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/photoblocks-grid-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9443\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9443\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:837;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10996\";s:4:\"slug\";s:12:\"optinmonster\";s:19:\"versionEndExcluding\";s:7:\"1.1.4.6\";s:11:\"description\";s:121:\"The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.\";s:4:\"refs\";s:416:\"[{\"url\":\"http:\\/\\/www.pritect.net\\/blog\\/optinmonster-1-1-4-6-security-vulnerability\",\"name\":\"http:\\/\\/www.pritect.net\\/blog\\/optinmonster-1-1-4-6-security-vulnerability\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/optinmonster\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/optinmonster\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]}]\";}i:838;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15871\";s:4:\"slug\";s:10:\"loginpress\";s:19:\"versionEndExcluding\";s:5:\"1.1.4\";s:11:\"description\";s:97:\"The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/loginpress\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/loginpress\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.webarxsecurity.com\\/loginpress-plugin\\/\",\"name\":\"https:\\/\\/www.webarxsecurity.com\\/loginpress-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:839;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15872\";s:4:\"slug\";s:10:\"LoginPress\";s:19:\"versionEndExcluding\";s:5:\"1.1.4\";s:11:\"description\";s:93:\"The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/loginpress\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/loginpress\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.webarxsecurity.com\\/loginpress-plugin\\/\",\"name\":\"https:\\/\\/www.webarxsecurity.com\\/loginpress-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:840;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10903\";s:4:\"slug\";s:45:\"GoDaddy godaddy-email-marketing-sign-up-forms\";s:19:\"versionEndExcluding\";s:5:\"1.1.3\";s:11:\"description\";s:93:\"The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.\";s:4:\"refs\";s:234:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/godaddy-email-marketing-sign-up-forms\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/godaddy-email-marketing-sign-up-forms\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:841;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10903\";s:4:\"slug\";s:45:\"GoDaddy godaddy-email-marketing-sign-up-forms\";s:19:\"versionEndExcluding\";s:5:\"1.1.3\";s:11:\"description\";s:93:\"The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.\";s:4:\"refs\";s:234:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/godaddy-email-marketing-sign-up-forms\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/godaddy-email-marketing-sign-up-forms\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:842;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10944\";s:4:\"slug\";s:25:\"multisite-post-duplicator\";s:19:\"versionEndExcluding\";s:5:\"1.1.3\";s:11:\"description\";s:101:\"The multisite-post-duplicator plugin before 1.1.3 for WordPress has wp-admin/tools.php?page=mpd CSRF.\";s:4:\"refs\";s:608:\"[{\"url\":\"https:\\/\\/advisories.dxw.com\\/advisories\\/csrf-vulnerability-in-multisite-post-duplicator-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can-do\\/\",\"name\":\"https:\\/\\/advisories.dxw.com\\/advisories\\/csrf-vulnerability-in-multisite-post-duplicator-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can-do\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/multisite-post-duplicator\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/multisite-post-duplicator\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:843;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10944\";s:4:\"slug\";s:25:\"multisite-post-duplicator\";s:19:\"versionEndExcluding\";s:5:\"1.1.3\";s:11:\"description\";s:101:\"The multisite-post-duplicator plugin before 1.1.3 for WordPress has wp-admin/tools.php?page=mpd CSRF.\";s:4:\"refs\";s:608:\"[{\"url\":\"https:\\/\\/advisories.dxw.com\\/advisories\\/csrf-vulnerability-in-multisite-post-duplicator-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can-do\\/\",\"name\":\"https:\\/\\/advisories.dxw.com\\/advisories\\/csrf-vulnerability-in-multisite-post-duplicator-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can-do\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/multisite-post-duplicator\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/multisite-post-duplicator\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:844;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15778\";s:4:\"slug\";s:21:\"woo-variation-gallery\";s:19:\"versionEndExcluding\";s:6:\"1.1.29\";s:11:\"description\";s:69:\"The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS.\";s:4:\"refs\";s:802:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/woo-variation-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/woo-variation-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9852\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9852\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.pluginvulnerabilities.com\\/2019\\/08\\/20\\/vulnerablity-details-authenticated-persistent-cross-site-scripting-xss-in-additional-variation-images-for-woocommerce\\/\",\"name\":\"https:\\/\\/www.pluginvulnerabilities.com\\/2019\\/08\\/20\\/vulnerablity-details-authenticated-persistent-cross-site-scripting-xss-in-additional-variation-images-for-woocommerce\\/\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:845;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10916\";s:4:\"slug\";s:28:\"appointment-booking-calendar\";s:19:\"versionEndExcluding\";s:6:\"1.1.24\";s:11:\"description\";s:132:\"The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319.\";s:4:\"refs\";s:239:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/appointment-booking-calendar\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/appointment-booking-calendar\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:846;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10916\";s:4:\"slug\";s:28:\"appointment-booking-calendar\";s:19:\"versionEndExcluding\";s:6:\"1.1.24\";s:11:\"description\";s:132:\"The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319.\";s:4:\"refs\";s:239:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/appointment-booking-calendar\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/appointment-booking-calendar\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:847;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18573\";s:4:\"slug\";s:16:\"simple-login-log\";s:19:\"versionEndExcluding\";s:5:\"1.1.2\";s:11:\"description\";s:73:\"The simple-login-log plugin before 1.1.2 for WordPress has SQL injection.\";s:4:\"refs\";s:215:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-login-log\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-login-log\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:848;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-11005\";s:4:\"slug\";s:11:\"instalinker\";s:19:\"versionEndExcluding\";s:5:\"1.1.2\";s:11:\"description\";s:108:\"The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?client_id= XSS.\";s:4:\"refs\";s:443:\"[{\"url\":\"https:\\/\\/rastating.github.io\\/instalinker-reflected-xss-information-disclosure\\/\",\"name\":\"https:\\/\\/rastating.github.io\\/instalinker-reflected-xss-information-disclosure\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/instalinker\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/instalinker\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]}]\";}i:849;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-11005\";s:4:\"slug\";s:11:\"instalinker\";s:19:\"versionEndExcluding\";s:5:\"1.1.2\";s:11:\"description\";s:108:\"The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?client_id= XSS.\";s:4:\"refs\";s:443:\"[{\"url\":\"https:\\/\\/rastating.github.io\\/instalinker-reflected-xss-information-disclosure\\/\",\"name\":\"https:\\/\\/rastating.github.io\\/instalinker-reflected-xss-information-disclosure\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/instalinker\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/instalinker\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]}]\";}i:850;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15842\";s:4:\"slug\";s:31:\"easy-pdf-restaurant-menu-upload\";s:19:\"versionEndExcluding\";s:5:\"1.1.2\";s:11:\"description\";s:78:\"The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS.\";s:4:\"refs\";s:240:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/easy-pdf-restaurant-menu-upload\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/easy-pdf-restaurant-menu-upload\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]\";}i:851;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18514\";s:4:\"slug\";s:16:\"simple-login-log\";s:19:\"versionEndExcluding\";s:5:\"1.1.2\";s:11:\"description\";s:73:\"The simple-login-log plugin before 1.1.2 for WordPress has SQL injection.\";s:4:\"refs\";s:215:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-login-log\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/simple-login-log\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:852;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:32:\"yith-woocommerce-product-bundles\";s:19:\"versionEndExcluding\";s:6:\"1.1.17\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:853;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:40:\"yith-product-size-charts-for-woocommerce\";s:19:\"versionEndExcluding\";s:6:\"1.1.13\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:854;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:45:\"yith-woocommerce-authorizenet-payment-gateway\";s:19:\"versionEndExcluding\";s:6:\"1.1.13\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:855;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:29:\"yith-woocommerce-best-sellers\";s:19:\"versionEndExcluding\";s:6:\"1.1.13\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:856;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9355\";s:4:\"slug\";s:25:\"two-factor-authentication\";s:19:\"versionEndExcluding\";s:6:\"1.1.10\";s:11:\"description\";s:91:\"The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.\";s:4:\"refs\";s:233:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/two-factor-authentication\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/two-factor-authentication\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:857;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18529\";s:4:\"slug\";s:8:\"promobar\";s:19:\"versionEndExcluding\";s:5:\"1.1.1\";s:11:\"description\";s:71:\"The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:176:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/promobar\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/promobar\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:858;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18554\";s:4:\"slug\";s:17:\"analytics-tracker\";s:19:\"versionEndExcluding\";s:5:\"1.1.1\";s:11:\"description\";s:83:\"The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event.\";s:4:\"refs\";s:194:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/analytics-tracker\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/analytics-tracker\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:859;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-11003\";s:4:\"slug\";s:20:\"Elegant Themes Bloom\";s:19:\"versionEndExcluding\";s:5:\"1.1.1\";s:11:\"description\";s:84:\"The Elegant Themes Bloom plugin before 1.1.1 for WordPress has privilege escalation.\";s:4:\"refs\";s:469:\"[{\"url\":\"http:\\/\\/www.pritect.net\\/blog\\/elegant-themes-security-vulnerability\",\"name\":\"http:\\/\\/www.pritect.net\\/blog\\/elegant-themes-security-vulnerability\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wptavern.com\\/critical-security-vulnerability-discovered-in-elegant-themes-products\",\"name\":\"https:\\/\\/wptavern.com\\/critical-security-vulnerability-discovered-in-elegant-themes-products\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:860;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-11003\";s:4:\"slug\";s:20:\"Elegant Themes Bloom\";s:19:\"versionEndExcluding\";s:5:\"1.1.1\";s:11:\"description\";s:84:\"The Elegant Themes Bloom plugin before 1.1.1 for WordPress has privilege escalation.\";s:4:\"refs\";s:469:\"[{\"url\":\"http:\\/\\/www.pritect.net\\/blog\\/elegant-themes-security-vulnerability\",\"name\":\"http:\\/\\/www.pritect.net\\/blog\\/elegant-themes-security-vulnerability\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wptavern.com\\/critical-security-vulnerability-discovered-in-elegant-themes-products\",\"name\":\"https:\\/\\/wptavern.com\\/critical-security-vulnerability-discovered-in-elegant-themes-products\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:861;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9321\";s:4:\"slug\";s:17:\"shortcode-factory\";s:19:\"versionEndExcluding\";s:5:\"1.1.1\";s:11:\"description\";s:82:\"The shortcode-factory plugin before 1.1.1 for WordPress has XSS via add_query_arg.\";s:4:\"refs\";s:194:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/shortcode-factory\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/shortcode-factory\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:862;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9335\";s:4:\"slug\";s:14:\"limit-attempts\";s:19:\"versionEndExcluding\";s:5:\"1.1.1\";s:11:\"description\";s:98:\"The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling.\";s:4:\"refs\";s:188:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/limit-attempts\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/limit-attempts\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:863;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18500\";s:4:\"slug\";s:19:\"social-buttons-pack\";s:19:\"versionEndExcluding\";s:5:\"1.1.1\";s:11:\"description\";s:82:\"The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:216:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/social-buttons-pack\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/social-buttons-pack\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]\";}i:864;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18518\";s:4:\"slug\";s:8:\"bws-smtp\";s:19:\"versionEndExcluding\";s:5:\"1.1.0\";s:11:\"description\";s:71:\"The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:176:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-smtp\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-smtp\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:865;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18532\";s:4:\"slug\";s:6:\"realty\";s:19:\"versionEndExcluding\";s:5:\"1.1.0\";s:11:\"description\";s:69:\"The realty plugin before 1.1.0 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:172:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/realty\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/realty\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:866;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18555\";s:4:\"slug\";s:11:\"booking-sms\";s:19:\"versionEndExcluding\";s:5:\"1.1.0\";s:11:\"description\";s:58:\"The booking-sms plugin before 1.1.0 for WordPress has XSS.\";s:4:\"refs\";s:182:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/booking-sms\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/booking-sms\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:867;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9498\";s:4:\"slug\";s:14:\"wps-hide-login\";s:19:\"versionEndExcluding\";s:3:\"1.1\";s:11:\"description\";s:96:\"The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value.\";s:4:\"refs\";s:316:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-hide-login\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wps-hide-login\\/#developers\",\"refsource\":\"CONFIRM\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8011\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8011\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:868;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-15810\";s:4:\"slug\";s:33:\"PopCash.Net Code Integration Tool\";s:19:\"versionEndExcluding\";s:3:\"1.1\";s:11:\"description\";s:122:\"The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php.\";s:4:\"refs\";s:759:\"[{\"url\":\"https:\\/\\/packetstormsecurity.com\\/files\\/144583\\/WordPress-PopCash.Net-Publisher-Code-Integration-1.0-Cross-Site-Scripting.html\",\"name\":\"https:\\/\\/packetstormsecurity.com\\/files\\/144583\\/WordPress-PopCash.Net-Publisher-Code-Integration-1.0-Cross-Site-Scripting.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/popcashnet-code-integration-tool\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/popcashnet-code-integration-tool\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8936\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8936\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:869;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9428\";s:4:\"slug\";s:12:\"wplegalpages\";s:19:\"versionEndExcluding\";s:3:\"1.1\";s:11:\"description\";s:244:\"The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-business-name, lp-phone, lp-street, lp-city-state, lp-country, lp-email, lp-address, or lp-niche parameters.\";s:4:\"refs\";s:619:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_4e7cf11876edb93517405b69cb033741.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_4e7cf11876edb93517405b69cb033741.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wplegalpages\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wplegalpages\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8291\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8291\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:870;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10910\";s:4:\"slug\";s:11:\"formbuilder\";s:19:\"versionEndExcluding\";s:4:\"1.06\";s:11:\"description\";s:73:\"The formbuilder plugin before 1.06 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:182:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/formbuilder\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/formbuilder\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:871;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18015\";s:4:\"slug\";s:22:\"ILLID Share This Image\";s:19:\"versionEndExcluding\";s:4:\"1.04\";s:11:\"description\";s:101:\"The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter.\";s:4:\"refs\";s:908:\"[{\"url\":\"https:\\/\\/packetstormsecurity.com\\/files\\/145464\\/WordPress-Share-This-Image-1.03-Cross-Site-Scripting.html\",\"name\":\"https:\\/\\/packetstormsecurity.com\\/files\\/145464\\/WordPress-Share-This-Image-1.03-Cross-Site-Scripting.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/share-this-image\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/share-this-image\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wordpress.org\\/support\\/topic\\/share-this-image-1-03-cross-site-scripting\\/\",\"name\":\"https:\\/\\/wordpress.org\\/support\\/topic\\/share-this-image-1-03-cross-site-scripting\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Issue Tracking\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8991\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8991\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:872;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10964\";s:4:\"slug\";s:6:\"dwnldr\";s:19:\"versionEndExcluding\";s:4:\"1.01\";s:11:\"description\";s:83:\"The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header.\";s:4:\"refs\";s:407:\"[{\"url\":\"https:\\/\\/rastating.github.io\\/dwnldr-1-0-stored-xss-disclosure\\/\",\"name\":\"https:\\/\\/rastating.github.io\\/dwnldr-1-0-stored-xss-disclosure\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/dwnldr\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/dwnldr\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:873;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10991\";s:4:\"slug\";s:11:\"imdb-widget\";s:19:\"versionEndExcluding\";s:5:\"1.0.9\";s:11:\"description\";s:75:\"The imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion.\";s:4:\"refs\";s:344:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/imdb-widget\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/imdb-widget\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8426\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8426\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:874;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10991\";s:4:\"slug\";s:11:\"imdb-widget\";s:19:\"versionEndExcluding\";s:5:\"1.0.9\";s:11:\"description\";s:75:\"The imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion.\";s:4:\"refs\";s:344:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/imdb-widget\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/imdb-widget\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8426\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8426\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:875;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15644\";s:4:\"slug\";s:12:\"zoho-salesiq\";s:19:\"versionEndExcluding\";s:5:\"1.0.9\";s:11:\"description\";s:66:\"The zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS.\";s:4:\"refs\";s:337:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/zoho-salesiq\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/zoho-salesiq\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9433\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9433\",\"refsource\":\"MISC\",\"tags\":[\"Broken Link\"]}]\";}i:876;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15645\";s:4:\"slug\";s:12:\"zoho-salesiq\";s:19:\"versionEndExcluding\";s:5:\"1.0.9\";s:11:\"description\";s:60:\"The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF.\";s:4:\"refs\";s:337:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/zoho-salesiq\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/zoho-salesiq\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9433\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9433\",\"refsource\":\"MISC\",\"tags\":[\"Broken Link\"]}]\";}i:877;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-17072\";s:4:\"slug\";s:23:\"new-contact-form-widget\";s:19:\"versionEndExcluding\";s:5:\"1.0.9\";s:11:\"description\";s:150:\"The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php.\";s:4:\"refs\";s:436:\"[{\"url\":\"https:\\/\\/gist.github.com\\/rezaduty\\/18afedba24bb1e5835010bd2de67cece\",\"name\":\"https:\\/\\/gist.github.com\\/rezaduty\\/18afedba24bb1e5835010bd2de67cece\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/new-contact-form-widget\\/#description\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/new-contact-form-widget\\/#description\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]\";}i:878;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18579\";s:4:\"slug\";s:9:\"corner-ad\";s:19:\"versionEndExcluding\";s:5:\"1.0.8\";s:11:\"description\";s:56:\"The corner-ad plugin before 1.0.8 for WordPress has XSS.\";s:4:\"refs\";s:178:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/corner-ad\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/corner-ad\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:879;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9348\";s:4:\"slug\";s:14:\"sell-downloads\";s:19:\"versionEndExcluding\";s:5:\"1.0.8\";s:11:\"description\";s:123:\"The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.\";s:4:\"refs\";s:188:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/sell-downloads\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/sell-downloads\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:880;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9384\";s:4:\"slug\";s:8:\"relevant\";s:19:\"versionEndExcluding\";s:5:\"1.0.8\";s:11:\"description\";s:55:\"The relevant plugin before 1.0.8 for WordPress has XSS.\";s:4:\"refs\";s:361:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/relevant\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/relevant\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8361\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8361\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:881;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-17070\";s:4:\"slug\";s:21:\"liquid-speech-balloon\";s:19:\"versionEndExcluding\";s:5:\"1.0.8\";s:11:\"description\";s:122:\"The liquid-speech-balloon (aka LIQUID SPEECH BALLOON) plugin before 1.0.7 for WordPress allows XSS with Internet Explorer.\";s:4:\"refs\";s:430:\"[{\"url\":\"https:\\/\\/gist.github.com\\/rezaduty\\/18afedba24bb1e5835010bd2de67cece\",\"name\":\"https:\\/\\/gist.github.com\\/rezaduty\\/18afedba24bb1e5835010bd2de67cece\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/liquid-speech-balloon\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/liquid-speech-balloon\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]\";}i:882;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18527\";s:4:\"slug\";s:10:\"pagination\";s:19:\"versionEndExcluding\";s:5:\"1.0.7\";s:11:\"description\";s:73:\"The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:180:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/pagination\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/pagination\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:883;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-20974\";s:4:\"slug\";s:7:\"js-jobs\";s:19:\"versionEndExcluding\";s:5:\"1.0.7\";s:11:\"description\";s:55:\"The js-jobs plugin before 1.0.7 for WordPress has CSRF.\";s:4:\"refs\";s:198:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/js-jobs\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/js-jobs\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:884;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18562\";s:4:\"slug\";s:16:\"error-log-viewer\";s:19:\"versionEndExcluding\";s:5:\"1.0.6\";s:11:\"description\";s:79:\"The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:192:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/error-log-viewer\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/error-log-viewer\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:885;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9311\";s:4:\"slug\";s:12:\"newstatpress\";s:19:\"versionEndExcluding\";s:5:\"1.0.6\";s:11:\"description\";s:69:\"The newstatpress plugin before 1.0.6 for WordPress has reflected XSS.\";s:4:\"refs\";s:207:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:886;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18542\";s:4:\"slug\";s:19:\"zendesk-help-center\";s:19:\"versionEndExcluding\";s:5:\"1.0.5\";s:11:\"description\";s:82:\"The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:222:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/zendesk-help-center\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/zendesk-help-center\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]}]\";}i:887;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9312\";s:4:\"slug\";s:12:\"newstatpress\";s:19:\"versionEndExcluding\";s:5:\"1.0.5\";s:11:\"description\";s:85:\"The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.\";s:4:\"refs\";s:207:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:888;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9313\";s:4:\"slug\";s:12:\"newstatpress\";s:19:\"versionEndExcluding\";s:5:\"1.0.5\";s:11:\"description\";s:95:\"The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.\";s:4:\"refs\";s:207:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:889;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9346\";s:4:\"slug\";s:8:\"cp-polls\";s:19:\"versionEndExcluding\";s:5:\"1.0.5\";s:11:\"description\";s:55:\"The cp-polls plugin before 1.0.5 for WordPress has XSS.\";s:4:\"refs\";s:176:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/cp-polls\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/cp-polls\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:890;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9405\";s:4:\"slug\";s:8:\"wp-piwik\";s:19:\"versionEndExcluding\";s:5:\"1.0.5\";s:11:\"description\";s:55:\"The wp-piwik plugin before 1.0.5 for WordPress has XSS.\";s:4:\"refs\";s:627:\"[{\"url\":\"https:\\/\\/github.com\\/braekling\\/WP-Matomo\\/commit\\/5110bfdb437a9f19b185ba8af33776fcb5e19940\",\"name\":\"https:\\/\\/github.com\\/braekling\\/WP-Matomo\\/commit\\/5110bfdb437a9f19b185ba8af33776fcb5e19940\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-piwik\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-piwik\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8216\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8216\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]\";}i:891;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18516\";s:4:\"slug\";s:12:\"bws-linkedin\";s:19:\"versionEndExcluding\";s:5:\"1.0.5\";s:11:\"description\";s:75:\"The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:184:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-linkedin\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-linkedin\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:892;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18517\";s:4:\"slug\";s:13:\"bws-pinterest\";s:19:\"versionEndExcluding\";s:5:\"1.0.5\";s:11:\"description\";s:76:\"The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:186:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-pinterest\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-pinterest\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:893;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10992\";s:4:\"slug\";s:11:\"music-store\";s:19:\"versionEndExcluding\";s:6:\"1.0.43\";s:11:\"description\";s:136:\"The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.\";s:4:\"refs\";s:555:\"[{\"url\":\"https:\\/\\/packetstormsecurity.com\\/files\\/136445\\/\",\"name\":\"https:\\/\\/packetstormsecurity.com\\/files\\/136445\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/music-store\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/music-store\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8429\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8429\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:894;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10992\";s:4:\"slug\";s:11:\"music-store\";s:19:\"versionEndExcluding\";s:6:\"1.0.43\";s:11:\"description\";s:136:\"The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.\";s:4:\"refs\";s:555:\"[{\"url\":\"https:\\/\\/packetstormsecurity.com\\/files\\/136445\\/\",\"name\":\"https:\\/\\/packetstormsecurity.com\\/files\\/136445\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/music-store\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/music-store\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8429\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8429\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:895;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-11515\";s:4:\"slug\";s:16:\"seo-by-rank-math\";s:19:\"versionEndExcluding\";s:6:\"1.0.41\";s:11:\"description\";s:380:\"The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an \"Open Redirect\" issue; instead, it allows the attacker to create a new URI with an arbitrary name (e.g., the /exampleredirect URI).\";s:4:\"refs\";s:675:\"[{\"url\":\"https:\\/\\/rankmath.com\\/changelog\\/\",\"name\":\"https:\\/\\/rankmath.com\\/changelog\\/\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/seo-by-rank-math\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/seo-by-rank-math\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\"]},{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/03\\/critical-vulnerabilities-affecting-over-200000-sites-patched-in-rank-math-seo-plugin\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/03\\/critical-vulnerabilities-affecting-over-200000-sites-patched-in-rank-math-seo-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:896;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18568\";s:4:\"slug\";s:15:\"my-wp-translate\";s:19:\"versionEndExcluding\";s:5:\"1.0.4\";s:11:\"description\";s:62:\"The my-wp-translate plugin before 1.0.4 for WordPress has XSS.\";s:4:\"refs\";s:190:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/my-wp-translate\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/my-wp-translate\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:897;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18569\";s:4:\"slug\";s:15:\"my-wp-translate\";s:19:\"versionEndExcluding\";s:5:\"1.0.4\";s:11:\"description\";s:63:\"The my-wp-translate plugin before 1.0.4 for WordPress has CSRF.\";s:4:\"refs\";s:190:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/my-wp-translate\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/my-wp-translate\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:898;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9314\";s:4:\"slug\";s:12:\"newstatpress\";s:19:\"versionEndExcluding\";s:5:\"1.0.4\";s:11:\"description\";s:89:\"The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.\";s:4:\"refs\";s:207:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:899;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9362\";s:4:\"slug\";s:14:\"Post Connector\";s:19:\"versionEndExcluding\";s:5:\"1.0.4\";s:11:\"description\";s:104:\"The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().\";s:4:\"refs\";s:203:\"[{\"url\":\"https:\\/\\/www.barrykooij.com\\/several-security-updates-released\\/\",\"name\":\"https:\\/\\/www.barrykooij.com\\/several-security-updates-released\\/\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:900;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-7228\";s:4:\"slug\";s:22:\"calculated-fields-form\";s:19:\"versionEndExcluding\";s:7:\"1.0.354\";s:11:\"description\";s:189:\"The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authenticated user.\";s:4:\"refs\";s:483:\"[{\"url\":\"https:\\/\\/spider-security.co.uk\\/blog-cve-2020-7228\",\"name\":\"https:\\/\\/spider-security.co.uk\\/blog-cve-2020-7228\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/calculated-fields-form\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/calculated-fields-form\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10043\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10043\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:901;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10986\";s:4:\"slug\";s:11:\"tweet-wheel\";s:19:\"versionEndExcluding\";s:7:\"1.0.3.3\";s:11:\"description\";s:133:\"The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret.\";s:4:\"refs\";s:588:\"[{\"url\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/tweet-wheel-xss-vulnerability\\/\",\"name\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/tweet-wheel-xss-vulnerability\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/tweet-wheel\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/tweet-wheel\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8464\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8464\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:902;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10986\";s:4:\"slug\";s:11:\"tweet-wheel\";s:19:\"versionEndExcluding\";s:7:\"1.0.3.3\";s:11:\"description\";s:133:\"The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret.\";s:4:\"refs\";s:588:\"[{\"url\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/tweet-wheel-xss-vulnerability\\/\",\"name\":\"https:\\/\\/0x62626262.wordpress.com\\/2016\\/04\\/21\\/tweet-wheel-xss-vulnerability\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/tweet-wheel\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/tweet-wheel\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8464\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8464\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:903;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9495\";s:4:\"slug\";s:17:\"syndication-links\";s:19:\"versionEndExcluding\";s:5:\"1.0.3\";s:11:\"description\";s:114:\"The syndication-links plugin before 1.0.3 for WordPress has XSS via the genericons/example.html anchor identifier.\";s:4:\"refs\";s:322:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/syndication-links\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/syndication-links\\/#developers\",\"refsource\":\"CONFIRM\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7981\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/7981\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:904;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9347\";s:4:\"slug\";s:9:\"wp-plotly\";s:19:\"versionEndExcluding\";s:5:\"1.0.3\";s:11:\"description\";s:67:\"The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors.\";s:4:\"refs\";s:178:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-plotly\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-plotly\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:905;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15834\";s:4:\"slug\";s:24:\"webp-converter-for-media\";s:19:\"versionEndExcluding\";s:5:\"1.0.3\";s:11:\"description\";s:72:\"The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF.\";s:4:\"refs\";s:378:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/webp-converter-for-media\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/webp-converter-for-media\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9400\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9400\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]\";}i:906;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-5484\";s:4:\"slug\";s:9:\"wp-plotly\";s:19:\"versionEndExcluding\";s:5:\"1.0.3\";s:11:\"description\";s:173:\"Cross-site scripting (XSS) vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via a post.\";s:4:\"refs\";s:633:\"[{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2015\\/Jul\\/68\",\"name\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2015\\/Jul\\/68\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/security.dxw.com\\/advisories\\/stored-xss-in-plotly-allows-less-privileged-users-to-insert-arbitrary-javascript-into-posts\\/\",\"name\":\"https:\\/\\/security.dxw.com\\/advisories\\/stored-xss-in-plotly-allows-less-privileged-users-to-insert-arbitrary-javascript-into-posts\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-plotly\\/changelog\\/\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-plotly\\/changelog\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:907;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15864\";s:4:\"slug\";s:19:\"breadcrumbs-by-menu\";s:19:\"versionEndExcluding\";s:5:\"1.0.3\";s:11:\"description\";s:66:\"The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.\";s:4:\"refs\";s:386:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/breadcrumbs-by-menu\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/breadcrumbs-by-menu\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9338\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9338\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]\";}i:908;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15865\";s:4:\"slug\";s:19:\"breadcrumbs-by-menu\";s:19:\"versionEndExcluding\";s:5:\"1.0.3\";s:11:\"description\";s:67:\"The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.\";s:4:\"refs\";s:386:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/breadcrumbs-by-menu\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/breadcrumbs-by-menu\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9338\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9338\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]\";}i:909;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10908\";s:4:\"slug\";s:29:\"booking-calendar-contact-form\";s:19:\"versionEndExcluding\";s:6:\"1.0.24\";s:11:\"description\";s:77:\"The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.\";s:4:\"refs\";s:218:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/booking-calendar-contact-form\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/booking-calendar-contact-form\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:910;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10909\";s:4:\"slug\";s:29:\"booking-calendar-contact-form\";s:19:\"versionEndExcluding\";s:6:\"1.0.24\";s:11:\"description\";s:87:\"The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.\";s:4:\"refs\";s:218:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/booking-calendar-contact-form\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/booking-calendar-contact-form\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:911;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10908\";s:4:\"slug\";s:29:\"booking-calendar-contact-form\";s:19:\"versionEndExcluding\";s:6:\"1.0.24\";s:11:\"description\";s:77:\"The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.\";s:4:\"refs\";s:218:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/booking-calendar-contact-form\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/booking-calendar-contact-form\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:912;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-16251\";s:4:\"slug\";s:43:\"yith-advanced-refund-system-for-woocommerce\";s:19:\"versionEndExcluding\";s:6:\"1.0.12\";s:11:\"description\";s:131:\"plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.\";s:4:\"refs\";s:391:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/authenticated-settings-change-vulnerability-in-yit-plugin-framework\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9932\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:913;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2014-10395\";s:4:\"slug\";s:8:\"cp-polls\";s:19:\"versionEndExcluding\";s:5:\"1.0.1\";s:11:\"description\";s:73:\"The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list.\";s:4:\"refs\";s:176:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/cp-polls\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/cp-polls\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:914;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9315\";s:4:\"slug\";s:12:\"newstatpress\";s:19:\"versionEndExcluding\";s:5:\"1.0.1\";s:11:\"description\";s:69:\"The newstatpress plugin before 1.0.1 for WordPress has SQL injection.\";s:4:\"refs\";s:207:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/newstatpress\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:915;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10921\";s:4:\"slug\";s:21:\"gallery-photo-gallery\";s:19:\"versionEndExcluding\";s:5:\"1.0.1\";s:11:\"description\";s:78:\"The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.\";s:4:\"refs\";s:225:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/gallery-photo-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/gallery-photo-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:916;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10921\";s:4:\"slug\";s:21:\"gallery-photo-gallery\";s:19:\"versionEndExcluding\";s:5:\"1.0.1\";s:11:\"description\";s:78:\"The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.\";s:4:\"refs\";s:225:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/gallery-photo-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/gallery-photo-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:917;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18537\";s:4:\"slug\";s:15:\"visitors-online\";s:19:\"versionEndExcluding\";s:5:\"1.0.0\";s:11:\"description\";s:78:\"The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:190:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/visitors-online\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/visitors-online\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:918;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10892\";s:4:\"slug\";s:12:\"chained-quiz\";s:19:\"versionEndExcluding\";s:3:\"1.0\";s:11:\"description\";s:73:\"The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:207:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/chained-quiz\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/chained-quiz\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:919;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10892\";s:4:\"slug\";s:12:\"chained-quiz\";s:19:\"versionEndExcluding\";s:3:\"1.0\";s:11:\"description\";s:73:\"The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:207:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/chained-quiz\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/chained-quiz\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:920;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9415\";s:4:\"slug\";s:12:\"bj-lazy-load\";s:19:\"versionEndExcluding\";s:3:\"1.0\";s:11:\"description\";s:75:\"The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion.\";s:4:\"refs\";s:373:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/bj-lazy-load\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/bj-lazy-load\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8174\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8174\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:921;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-20988\";s:4:\"slug\";s:7:\"wpgform\";s:19:\"versionEndExcluding\";s:4:\"0.94\";s:11:\"description\";s:91:\"The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation.\";s:4:\"refs\";s:174:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wpgform\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wpgform\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:922;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2014-9414\";s:4:\"slug\";s:14:\"W3 Total Cache\";s:19:\"versionEndExcluding\";s:7:\"0.9.4.1\";s:11:\"description\";s:402:\"The W3 Total Cache plugin before 0.9.4.1 for WordPress does not properly handle empty nonces, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and hijack the authentication of administrators for requests that change the mobile site redirect URI via the mobile_groups[*][redirect] parameter and an empty _wpnonce parameter in the w3tc_mobile page to wp-admin/admin.php.\";s:4:\"refs\";s:1655:\"[{\"url\":\"http:\\/\\/mazinahmed1.blogspot.com\\/2014\\/12\\/w3-total-caches-w3totalfail.html\",\"name\":\"http:\\/\\/mazinahmed1.blogspot.com\\/2014\\/12\\/w3-total-caches-w3totalfail.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\"]},{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/129512\\/W3-Total-Cache-0.9.4-Cross-Site-Request-Forgery.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/129512\\/W3-Total-Cache-0.9.4-Cross-Site-Request-Forgery.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\"]},{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2014\\/Dec\\/67\",\"name\":\"20141216 W3TotalFail: W3 Total Cache v 0.9.4 CSRF Vulnerability that Leads to Full Deface\",\"refsource\":\"FULLDISC\",\"tags\":[\"Exploit\"]},{\"url\":\"http:\\/\\/secunia.com\\/advisories\\/61562\",\"name\":\"61562\",\"refsource\":\"SECUNIA\",\"tags\":[]},{\"url\":\"http:\\/\\/www.securityfocus.com\\/archive\\/1\\/534250\\/100\\/0\\/threaded\",\"name\":\"20141216 W3TotalFail: W3 Total Cache v 0.9.4 CSRF Vulnerability that Leads to Full Deface\",\"refsource\":\"BUGTRAQ\",\"tags\":[]},{\"url\":\"https:\\/\\/exchange.xforce.ibmcloud.com\\/vulnerabilities\\/99352\",\"name\":\"w3totalcache-wordpress-wpnonce-csrf(99352)\",\"refsource\":\"XF\",\"tags\":[]},{\"url\":\"https:\\/\\/github.com\\/wp-plugins\\/w3-total-cache\\/commit\\/9a1cc9f70558282e135eb3120d271448c75b28dd#diff-86a10b31ab115483fe8111bedac14d15\",\"name\":\"https:\\/\\/github.com\\/wp-plugins\\/w3-total-cache\\/commit\\/9a1cc9f70558282e135eb3120d271448c75b28dd#diff-86a10b31ab115483fe8111bedac14d15\",\"refsource\":\"CONFIRM\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/w3-total-cache\\/changelog\\/\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/w3-total-cache\\/changelog\\/\",\"refsource\":\"CONFIRM\",\"tags\":[\"Vendor Advisory\"]}]\";}i:923;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9472\";s:4:\"slug\";s:14:\"incoming-links\";s:19:\"versionEndExcluding\";s:7:\"0.9.10b\";s:11:\"description\";s:105:\"The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header.\";s:4:\"refs\";s:591:\"[{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/1080044\\/incoming-links\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/changeset\\/1080044\\/incoming-links\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/incoming-links\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/incoming-links\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8015\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8015\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:924;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2012-6715\";s:4:\"slug\";s:11:\"formbuilder\";s:19:\"versionEndExcluding\";s:5:\"0.9.1\";s:11:\"description\";s:79:\"The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header.\";s:4:\"refs\";s:182:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/formbuilder\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/formbuilder\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:925;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9465\";s:4:\"slug\";s:24:\"yet-another-stars-rating\";s:19:\"versionEndExcluding\";s:5:\"0.9.1\";s:11:\"description\";s:142:\"The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.\";s:4:\"refs\";s:633:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_041b796c7533880df03a43895fed5f00.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_041b796c7533880df03a43895fed5f00.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/yet-another-stars-rating\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/yet-another-stars-rating\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8309\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8309\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:926;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9316\";s:4:\"slug\";s:16:\"wp-fastest-cache\";s:19:\"versionEndExcluding\";s:7:\"0.8.4.9\";s:11:\"description\";s:161:\"The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter.\";s:4:\"refs\";s:399:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-fastest-cache\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-fastest-cache\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.exploit-db.com\\/exploits\\/38678\",\"name\":\"https:\\/\\/www.exploit-db.com\\/exploits\\/38678\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]}]\";}i:927;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2020-7239\";s:4:\"slug\";s:19:\"conversation-watson\";s:19:\"versionEndExcluding\";s:6:\"0.8.21\";s:11:\"description\";s:160:\"The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a chat message containing JavaScript is sent.\";s:4:\"refs\";s:353:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/conversation-watson\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/conversation-watson\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.hooperlabs.xyz\\/disclosures\\/cve-2020-7239.php\",\"name\":\"https:\\/\\/www.hooperlabs.xyz\\/disclosures\\/cve-2020-7239.php\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:928;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18534\";s:4:\"slug\";s:17:\"share-on-diaspora\";s:19:\"versionEndExcluding\";s:5:\"0.7.2\";s:11:\"description\";s:98:\"The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters.\";s:4:\"refs\";s:194:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/share-on-diaspora\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/share-on-diaspora\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:929;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2012-6713\";s:4:\"slug\";s:11:\"job-manager\";s:19:\"versionEndExcluding\";s:6:\"0.7.19\";s:11:\"description\";s:75:\"The job-manager plugin before 0.7.19 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:205:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/job-manager\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/job-manager\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:930;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10969\";s:4:\"slug\";s:11:\"supportflow\";s:19:\"versionEndExcluding\";s:3:\"0.7\";s:11:\"description\";s:86:\"The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.\";s:4:\"refs\";s:454:\"[{\"url\":\"https:\\/\\/github.com\\/SupportFlow\\/supportflow\\/commit\\/c08d376072f093b650c49dcb44124f43ea0177b1\",\"name\":\"https:\\/\\/github.com\\/SupportFlow\\/supportflow\\/commit\\/c08d376072f093b650c49dcb44124f43ea0177b1\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/supportflow\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/supportflow\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:931;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10969\";s:4:\"slug\";s:11:\"supportflow\";s:19:\"versionEndExcluding\";s:3:\"0.7\";s:11:\"description\";s:86:\"The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.\";s:4:\"refs\";s:454:\"[{\"url\":\"https:\\/\\/github.com\\/SupportFlow\\/supportflow\\/commit\\/c08d376072f093b650c49dcb44124f43ea0177b1\",\"name\":\"https:\\/\\/github.com\\/SupportFlow\\/supportflow\\/commit\\/c08d376072f093b650c49dcb44124f43ea0177b1\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/supportflow\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/supportflow\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:932;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10970\";s:4:\"slug\";s:11:\"supportflow\";s:19:\"versionEndExcluding\";s:3:\"0.7\";s:11:\"description\";s:77:\"The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.\";s:4:\"refs\";s:461:\"[{\"url\":\"https:\\/\\/github.com\\/SupportFlow\\/supportflow\\/commit\\/c507cc863d161f87c28d0682714bf188ffac1a67\",\"name\":\"https:\\/\\/github.com\\/SupportFlow\\/supportflow\\/commit\\/c507cc863d161f87c28d0682714bf188ffac1a67\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/supportflow\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/supportflow\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:933;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10970\";s:4:\"slug\";s:11:\"supportflow\";s:19:\"versionEndExcluding\";s:3:\"0.7\";s:11:\"description\";s:77:\"The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.\";s:4:\"refs\";s:461:\"[{\"url\":\"https:\\/\\/github.com\\/SupportFlow\\/supportflow\\/commit\\/c507cc863d161f87c28d0682714bf188ffac1a67\",\"name\":\"https:\\/\\/github.com\\/SupportFlow\\/supportflow\\/commit\\/c507cc863d161f87c28d0682714bf188ffac1a67\",\"refsource\":\"MISC\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/supportflow\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/supportflow\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:934;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-14205\";s:4:\"slug\";s:15:\"adaptive-images\";s:19:\"versionEndExcluding\";s:6:\"0.6.67\";s:11:\"description\";s:253:\"A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST[\'adaptive-images-settings\'][\'source_file\'] parameter in adaptive-images-script.php.\";s:4:\"refs\";s:1053:\"[{\"url\":\"https:\\/\\/github.com\\/markgruffer\\/markgruffer.github.io\\/blob\\/master\\/_posts\\/2019-07-19-adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.markdown\",\"name\":\"https:\\/\\/github.com\\/markgruffer\\/markgruffer.github.io\\/blob\\/master\\/_posts\\/2019-07-19-adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.markdown\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/markgruffer.github.io\\/2019\\/07\\/19\\/adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.html\",\"name\":\"https:\\/\\/markgruffer.github.io\\/2019\\/07\\/19\\/adaptive-images-for-wordpress-0-6-66-lfi-rce-file-deletion.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/adaptive-images\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/adaptive-images\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9468\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9468\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:935;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9430\";s:4:\"slug\";s:10:\"crazy-bone\";s:19:\"versionEndExcluding\";s:5:\"0.6.0\";s:11:\"description\";s:88:\"The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header.\";s:4:\"refs\";s:608:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_e22c10161b1e2e4e54facf2d17e723c3.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_e22c10161b1e2e4e54facf2d17e723c3.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/crazy-bone\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/crazy-bone\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8281\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8281\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:936;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9453\";s:4:\"slug\";s:19:\"broken-link-manager\";s:19:\"versionEndExcluding\";s:5:\"0.6.0\";s:11:\"description\";s:137:\"The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.\";s:4:\"refs\";s:626:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_b677bb83a6c1495f85f76faa5b13011d.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_b677bb83a6c1495f85f76faa5b13011d.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/broken-link-manager\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/broken-link-manager\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\",\"Release Notes\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8333\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8333\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:937;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18561\";s:4:\"slug\";s:20:\"embed-comment-images\";s:19:\"versionEndExcluding\";s:3:\"0.6\";s:11:\"description\";s:65:\"The embed-comment-images plugin before 0.6 for WordPress has XSS.\";s:4:\"refs\";s:200:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/embed-comment-images\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/embed-comment-images\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:938;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10920\";s:4:\"slug\";s:11:\"gnucommerce\";s:19:\"versionEndExcluding\";s:10:\"0.5.7-BETA\";s:11:\"description\";s:63:\"The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS.\";s:4:\"refs\";s:205:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/gnucommerce\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/gnucommerce\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:939;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10920\";s:4:\"slug\";s:11:\"gnucommerce\";s:19:\"versionEndExcluding\";s:10:\"0.5.7-BETA\";s:11:\"description\";s:63:\"The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS.\";s:4:\"refs\";s:205:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/gnucommerce\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/gnucommerce\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:940;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10983\";s:4:\"slug\";s:5:\"ghost\";s:19:\"versionEndExcluding\";s:5:\"0.5.6\";s:11:\"description\";s:133:\"The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data.\";s:4:\"refs\";s:364:\"[{\"url\":\"https:\\/\\/packetstormsecurity.com\\/files\\/136887\\/\",\"name\":\"https:\\/\\/packetstormsecurity.com\\/files\\/136887\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ghost\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ghost\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:941;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10983\";s:4:\"slug\";s:5:\"ghost\";s:19:\"versionEndExcluding\";s:5:\"0.5.6\";s:11:\"description\";s:133:\"The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data.\";s:4:\"refs\";s:364:\"[{\"url\":\"https:\\/\\/packetstormsecurity.com\\/files\\/136887\\/\",\"name\":\"https:\\/\\/packetstormsecurity.com\\/files\\/136887\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/ghost\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/ghost\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:942;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10934\";s:4:\"slug\";s:11:\"check-email\";s:19:\"versionEndExcluding\";s:5:\"0.5.2\";s:11:\"description\";s:58:\"The check-email plugin before 0.5.2 for WordPress has XSS.\";s:4:\"refs\";s:182:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/check-email\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/check-email\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:943;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10934\";s:4:\"slug\";s:11:\"check-email\";s:19:\"versionEndExcluding\";s:5:\"0.5.2\";s:11:\"description\";s:58:\"The check-email plugin before 0.5.2 for WordPress has XSS.\";s:4:\"refs\";s:182:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/check-email\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/check-email\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:944;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9467\";s:4:\"slug\";s:19:\"broken-link-manager\";s:19:\"versionEndExcluding\";s:5:\"0.5.0\";s:11:\"description\";s:124:\"The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.\";s:4:\"refs\";s:629:\"[{\"url\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_604dd4c86dca013f6e5e89751352f36d.html\",\"name\":\"http:\\/\\/cinu.pl\\/research\\/wp-plugins\\/mail_604dd4c86dca013f6e5e89751352f36d.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/broken-link-manager\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/broken-link-manager\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8320\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/8320\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:945;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10897\";s:4:\"slug\";s:14:\"sermon-browser\";s:19:\"versionEndExcluding\";s:7:\"0.45.16\";s:11:\"description\";s:79:\"The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:188:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/sermon-browser\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/sermon-browser\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:946;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2016-10897\";s:4:\"slug\";s:14:\"sermon-browser\";s:19:\"versionEndExcluding\";s:7:\"0.45.16\";s:11:\"description\";s:79:\"The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:188:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/sermon-browser\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/sermon-browser\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:947;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2015-9325\";s:4:\"slug\";s:15:\"visitors-online\";s:19:\"versionEndExcluding\";s:3:\"0.4\";s:11:\"description\";s:70:\"The visitors-online plugin before 0.4 for WordPress has SQL injection.\";s:4:\"refs\";s:190:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/visitors-online\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/visitors-online\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:948;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2019-9880\";s:4:\"slug\";s:10:\"wp-graphql\";s:19:\"versionEndExcluding\";s:5:\"0.2.4\";s:11:\"description\";s:235:\"An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the \'users\' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username.\";s:4:\"refs\";s:1219:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/153025\\/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/153025\\/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/github.com\\/pentestpartners\\/snippets\\/blob\\/master\\/wp-graphql0.2.3_exploit.py\",\"name\":\"https:\\/\\/github.com\\/pentestpartners\\/snippets\\/blob\\/master\\/wp-graphql0.2.3_exploit.py\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/github.com\\/wp-graphql\\/wp-graphql\\/releases\\/tag\\/v0.3.0\",\"name\":\"https:\\/\\/github.com\\/wp-graphql\\/wp-graphql\\/releases\\/tag\\/v0.3.0\",\"refsource\":\"CONFIRM\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9282\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9282\",\"refsource\":\"MISC\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/www.pentestpartners.com\\/security-blog\\/pwning-wordpress-graphql\\/\",\"name\":\"https:\\/\\/www.pentestpartners.com\\/security-blog\\/pwning-wordpress-graphql\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:949;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2019-9881\";s:4:\"slug\";s:10:\"wp-graphql\";s:19:\"versionEndExcluding\";s:5:\"0.2.4\";s:11:\"description\";s:171:\"The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when \'allow comment\' is disabled.\";s:4:\"refs\";s:1240:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/153025\\/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/153025\\/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/github.com\\/pentestpartners\\/snippets\\/blob\\/master\\/wp-graphql0.2.3_exploit.py\",\"name\":\"https:\\/\\/github.com\\/pentestpartners\\/snippets\\/blob\\/master\\/wp-graphql0.2.3_exploit.py\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/github.com\\/wp-graphql\\/wp-graphql\\/releases\\/tag\\/v0.3.0\",\"name\":\"https:\\/\\/github.com\\/wp-graphql\\/wp-graphql\\/releases\\/tag\\/v0.3.0\",\"refsource\":\"CONFIRM\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9282\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9282\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.pentestpartners.com\\/security-blog\\/pwning-wordpress-graphql\\/\",\"name\":\"https:\\/\\/www.pentestpartners.com\\/security-blog\\/pwning-wordpress-graphql\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:950;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15110\";s:4:\"slug\";s:20:\"wp-front-end-profile\";s:19:\"versionEndExcluding\";s:5:\"0.2.2\";s:11:\"description\";s:67:\"The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS.\";s:4:\"refs\";s:200:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-front-end-profile\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-front-end-profile\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:951;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15111\";s:4:\"slug\";s:20:\"wp-front-end-profile\";s:19:\"versionEndExcluding\";s:5:\"0.2.2\";s:11:\"description\";s:92:\"The wp-front-end-profile plugin before 0.2.2 for WordPress has a privilege escalation issue.\";s:4:\"refs\";s:200:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-front-end-profile\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/wp-front-end-profile\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:952;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18530\";s:4:\"slug\";s:10:\"rating-bws\";s:19:\"versionEndExcluding\";s:3:\"0.2\";s:11:\"description\";s:71:\"The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:180:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/rating-bws\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/rating-bws\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:953;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18501\";s:4:\"slug\";s:16:\"social-login-bws\";s:19:\"versionEndExcluding\";s:3:\"0.2\";s:11:\"description\";s:77:\"The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:210:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/social-login-bws\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/social-login-bws\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]\";}i:954;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15837\";s:4:\"slug\";s:12:\"webp-express\";s:19:\"versionEndExcluding\";s:6:\"0.14.8\";s:11:\"description\";s:67:\"The webp-express plugin before 0.14.8 for WordPress has stored XSS.\";s:4:\"refs\";s:382:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/webp-express\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/webp-express\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9389\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9389\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Patch\",\"Third Party Advisory\"]}]\";}i:955;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15330\";s:4:\"slug\";s:12:\"webp-express\";s:19:\"versionEndExcluding\";s:7:\"0.14.11\";s:11:\"description\";s:112:\"The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading.\";s:4:\"refs\";s:184:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/webp-express\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/webp-express\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:956;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18558\";s:4:\"slug\";s:16:\"bws-testimonials\";s:19:\"versionEndExcluding\";s:5:\"0.1.9\";s:11:\"description\";s:79:\"The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:192:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-testimonials\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/bws-testimonials\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:957;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18590\";s:4:\"slug\";s:9:\"timesheet\";s:19:\"versionEndExcluding\";s:5:\"0.1.5\";s:11:\"description\";s:72:\"The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:178:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/timesheet\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/timesheet\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:958;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18548\";s:4:\"slug\";s:10:\"note-press\";s:19:\"versionEndExcluding\";s:5:\"0.1.2\";s:11:\"description\";s:67:\"The note-press plugin before 0.1.2 for WordPress has SQL injection.\";s:4:\"refs\";s:198:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/note-press\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/note-press\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]\";}i:959;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2017-18493\";s:4:\"slug\";s:17:\"custom-admin-page\";s:19:\"versionEndExcluding\";s:5:\"0.1.2\";s:11:\"description\";s:80:\"The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.\";s:4:\"refs\";s:217:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/custom-admin-page\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/custom-admin-page\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]}]\";}i:960;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2018-21001\";s:4:\"slug\";s:10:\"anycomment\";s:19:\"versionEndExcluding\";s:6:\"0.0.33\";s:11:\"description\";s:58:\"The anycomment plugin before 0.0.33 for WordPress has XSS.\";s:4:\"refs\";s:180:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/anycomment\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/anycomment\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\"]}]\";}i:961;O:8:\"stdClass\":6:{s:6:\"CVE_ID\";s:14:\"CVE-2020-11516\";s:4:\"slug\";s:25:\"contact-form-7-datepicker\";s:13:\"versionImpact\";s:5:\"2.6.0\";s:11:\"description\";s:500:\"Stored XSS in the Contact Form 7 Datepicker plugin through 2.6.0 for WordPress allows authenticated attackers with minimal permissions to save arbitrary JavaScript to the plugin\'s settings via the unprotected wp_ajax_cf7dp_save_settings AJAX action and the ui_theme parameter. If an administrator creates or modifies a contact form, the JavaScript will be executed in their browser, which can then be used to create new administrative users or perform other actions using the administrator\'s session.\";s:14:\"recommendation\";s:132:\"This plugin has been closed as of April 1, 2020 and is not available for download. This closure is temporary, pending a full review.\";s:4:\"refs\";s:315:\"[{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/04\\/high-severity-vulnerability-leads-to-closure-of-plugin-with-over-100000-installations\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/04\\/high-severity-vulnerability-leads-to-closure-of-plugin-with-over-100000-installations\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:962;O:8:\"stdClass\":6:{s:6:\"CVE_ID\";s:14:\"CVE-2020-11673\";s:4:\"slug\";s:7:\"poll-wp\";s:13:\"versionImpact\";s:5:\"1.3.4\";s:11:\"description\";s:302:\"An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage of the callback wp_ajax_nopriv function in Includes/Total-Soft-Poll-Ajax.php for sensitive operations.\";s:14:\"recommendation\";s:193:\"This plugin has been closed as of March 31, 2020 and is not available for download. This closure is temporary, pending a full review. Details: https://wordpress.org/plugins/poll-wp/#description\";s:4:\"refs\";s:395:\"[{\"url\":\"https:\\/\\/gist.github.com\\/pak0s\\/05a0e517aeff4b1422d1a93f59718459\",\"name\":\"https:\\/\\/gist.github.com\\/pak0s\\/05a0e517aeff4b1422d1a93f59718459\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/poll-wp\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/poll-wp\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:963;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-12075\";s:4:\"slug\";s:35:\"data-tables-generator-by-supsystic \";s:13:\"versionImpact\";s:6:\"1.9.92\";s:11:\"description\";s:115:\"The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions.\";s:4:\"refs\";s:289:\"[{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/03\\/vulnerabilities-patched-in-the-data-tables-generator-by-supsystic-plugin\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/03\\/vulnerabilities-patched-in-the-data-tables-generator-by-supsystic-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:964;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-12076\";s:4:\"slug\";s:35:\"data-tables-generator-by-supsystic \";s:13:\"versionImpact\";s:6:\"1.9.92\";s:11:\"description\";s:154:\"The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS.\";s:4:\"refs\";s:289:\"[{\"url\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/03\\/vulnerabilities-patched-in-the-data-tables-generator-by-supsystic-plugin\\/\",\"name\":\"https:\\/\\/www.wordfence.com\\/blog\\/2020\\/03\\/vulnerabilities-patched-in-the-data-tables-generator-by-supsystic-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:965;O:8:\"stdClass\":6:{s:6:\"CVE_ID\";s:14:\"CVE-2020-12054\";s:4:\"slug\";s:16:\"catch-breadcrumb\";s:13:\"versionImpact\";s:4:\"1.57\";s:11:\"description\";s:454:\"The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also affected are 16 themes (if the plugin is enabled) by the same author: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean Enterprise PRO, Bold Photography PRO, Intuitive PRO, Devotepress PRO, Clean Blocks PRO, Foodoholic PRO, Catch Mag PRO, Catch Wedding PRO, and Higher Education PRO.\";s:14:\"recommendation\";s:133:\"This plugin has been closed as of April 22, 2020 and is not available for download. This closure is temporary, pending a full review.\";s:4:\"refs\";s:287:\"[{\"url\":\"https:\\/\\/cxsecurity.com\\/issue\\/WLB-2020040144\",\"name\":\"https:\\/\\/cxsecurity.com\\/issue\\/WLB-2020040144\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10184\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10184\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:966;O:8:\"stdClass\":6:{s:6:\"CVE_ID\";s:14:\"CVE-2020-11530\";s:4:\"slug\";s:10:\"chopslider\";s:13:\"versionImpact\";s:3:\"3.4\";s:11:\"description\";s:270:\"A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. The vulnerability is introduced in the id GET parameter supplied to get_script/index.php, and allows an attacker to execute arbitrary SQL queries in the context of the WP database user.\";s:14:\"recommendation\";s:120:\"No updates to this plugin currently exists, it is recommended you remove this plugin completely and find an alternative.\";s:4:\"refs\";s:682:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/157607\\/WordPress-ChopSlider-3-SQL-Injection.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/157607\\/WordPress-ChopSlider-3-SQL-Injection.html\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2020\\/May\\/26\",\"name\":\"20200508 ChopSlider3 Wordpress Plugin SQL Injection\",\"refsource\":\"FULLDISC\",\"tags\":[]},{\"url\":\"https:\\/\\/github.com\\/idangerous\\/Plugins\\/tree\\/master\\/Chop%20Slider%203\",\"name\":\"https:\\/\\/github.com\\/idangerous\\/Plugins\\/tree\\/master\\/Chop%20Slider%203\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/idangero.us\\/\",\"name\":\"https:\\/\\/idangero.us\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:967;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:0:\"\";s:4:\"slug\";s:12:\"wp-html-mail\";s:13:\"versionImpact\";s:7:\"2.9.0.3\";s:11:\"description\";s:211:\"Multiple plugins offering to convert WordPress’ default plain text emails to HTML format were found to be vulnerable to HTML injection, which could lead to phishing or CSRF attacks targeting the administrator.\";s:4:\"refs\";s:84:\"https://blog.nintechnet.com/multiple-wordpress-plugins-vulnerable-to-html-injection/\";}i:968;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:0:\"\";s:4:\"slug\";s:14:\"zoho-crm-forms\";s:13:\"versionImpact\";s:7:\"1.6.9.1\";s:11:\"description\";s:224:\"A cross site scripting (XSS) attack can cause arbitrary code (java script) to run in a user’s browser while the browser is connected to a trusted web site. \r\n\r\nref: https://github.com/cybersecurityworks/Disclosed/issues/16\";s:4:\"refs\";s:115:\"https://github.com/cybersecurityworks/Disclosed/issues/16\r\nhttps://wordpress.org/plugins/zoho-crm-forms/#developers\";}i:969;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:0:\"\";s:4:\"slug\";s:12:\"about-author\";s:13:\"versionImpact\";s:5:\"1.3.9\";s:11:\"description\";s:263:\"Wordpress About Author plugin with a version lower or equal with 1.3.9 is affected by an authenticated Stored Cross-site scripting (XSS) vulnerability.\r\n\r\nref: https://nitesculucian.github.io/2019/10/25/about-author-1-3-9-authentificated-stored-xss-vulnerability/\";s:4:\"refs\";s:152:\"https://nitesculucian.github.io/2019/10/25/about-author-1-3-9-authentificated-stored-xss-vulnerability/\r\n\r\nhttps://wordpress.org/plugins/about-author/\r\n\";}i:970;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:0:\"\";s:4:\"slug\";s:17:\"yuzo-related-post\";s:13:\"versionImpact\";s:7:\"5.12.94\";s:11:\"description\";s:117:\"Yuzo Related Posts has been closed as of March 30, 2019 due to a security issue. No further details have been issued.\";s:4:\"refs\";s:0:\"\";}i:971;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-14796\";s:4:\"slug\";s:39:\"mq-woocommerce-products-price-bulk-edit\";s:13:\"versionImpact\";s:3:\"2.0\";s:11:\"description\";s:321:\"This plugin has been closed as of May 17, 2019 and is not available for download. Reason: Security Issue.\r\n\r\nThe mq-woocommerce-products-price-bulk-edit (aka Woocommerce Products Price Bulk Edit) plugin 2.0 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=update_options show_products_page_limit parameter.\";s:4:\"refs\";s:877:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/mq-woocommerce-products-price-bulk-edit\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/mq-woocommerce-products-price-bulk-edit\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9515\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9515\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.pluginvulnerabilities.com\\/2019\\/05\\/16\\/is-this-authenticated-persistent-cross-site-scripting-xss-vulnerability-what-hackers-would-be-interested-in-woocommerce-products-price-bulk-edit-for\\/\",\"name\":\"https:\\/\\/www.pluginvulnerabilities.com\\/2019\\/05\\/16\\/is-this-authenticated-persistent-cross-site-scripting-xss-vulnerability-what-hackers-would-be-interested-in-woocommerce-products-price-bulk-edit-for\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:972;O:8:\"stdClass\":6:{s:6:\"CVE_ID\";s:0:\"\";s:4:\"slug\";s:25:\"gravity-forms-sticky-list\";s:13:\"versionImpact\";s:5:\"1.5.2\";s:11:\"description\";s:111:\"Security issue - Plugin was closed on May 2nd 2019.\r\n\r\nhttps://wordpress.org/plugins/gravity-forms-sticky-list/\";s:14:\"recommendation\";s:43:\"Plugin should be removed from your website.\";s:4:\"refs\";s:0:\"\";}i:973;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-14978\";s:4:\"slug\";s:38:\"woocommerce-payu-india-payment-gateway\";s:13:\"versionImpact\";s:5:\"2.1.1\";s:11:\"description\";s:228:\"/payu/icpcheckout/ in the WooCommerce PayU India Payment Gateway plugin 2.1.1 for WordPress allows Parameter Tampering in the purchaseQuantity=1 parameter, as demonstrated by purchasing an item for lower than the intended price.\";s:4:\"refs\";s:189:\"[{\"url\":\"https:\\/\\/gkaim.com\\/cve-2019-14978-vikas-chaudhary\\/\",\"name\":\"https:\\/\\/gkaim.com\\/cve-2019-14978-vikas-chaudhary\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:974;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-14467\";s:4:\"slug\";s:20:\"social-photo-gallery\";s:13:\"versionImpact\";s:3:\"1.0\";s:11:\"description\";s:203:\"The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album, because the file extension is not checked.\";s:4:\"refs\";s:776:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/155357\\/WordPress-Social-Photo-Gallery-1.0-Remote-Code-Execution.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/155357\\/WordPress-Social-Photo-Gallery-1.0-Remote-Code-Execution.html\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/seclists.org\\/fulldisclosure\\/2019\\/Nov\\/13\",\"name\":\"20191115 WordPress Plugin Social Photo Gallery 1.0 - Remote Code Execution\",\"refsource\":\"FULLDISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/social-photo-gallery\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/social-photo-gallery\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9952\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9952\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:975;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2020-25380\";s:4:\"slug\";s:11:\"bulk-change\";s:11:\"description\";s:224:\"Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 is affected by: Cross Site Scripting (XSS) via the \'Recall Settings\' field in admin.php. An attacker can inject JavaScript code that will be stored and executed.\";s:14:\"recommendation\";s:106:\"This plugin has been closed as of June 19, 2020 and is not available for download. Reason: Security Issue.\";s:4:\"refs\";s:195:\"[{\"url\":\"https:\\/\\/zeroaptitude.com\\/misha\\/wordpress-plugin-bug-hunting-part-2\\/\",\"name\":\"https:\\/\\/zeroaptitude.com\\/misha\\/wordpress-plugin-bug-hunting-part-2\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:976;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-19198\";s:4:\"slug\";s:17:\"scoutnet-kalender\";s:13:\"versionImpact\";s:5:\"1.1.0\";s:11:\"description\";s:60:\"The Scoutnet Kalender plugin 1.1.0 for WordPress allows XSS.\";s:4:\"refs\";s:697:\"[{\"url\":\"http:\\/\\/packetstormsecurity.com\\/files\\/155615\\/WordPress-Scoutnet-Kalender-1.1.0-Cross-Site-Scripting.html\",\"name\":\"http:\\/\\/packetstormsecurity.com\\/files\\/155615\\/WordPress-Scoutnet-Kalender-1.1.0-Cross-Site-Scripting.html\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Mitigation\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/scoutnet-kalender\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/scoutnet-kalender\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9969\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9969\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:977;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2014-4553\";s:4:\"slug\";s:38:\"spreadshirt-rss-3d-cube-flash-gallery \";s:13:\"versionImpact\";s:3:\"1.3\";s:11:\"description\";s:189:\"Cross-site Scripting (XSS) in the spreadshirt-rss-3d-cube-flash-gallery plugin 2014 for WordPress allows remote attackers to execute arbitrary web script or HTML via unspecified parameters.\";s:4:\"refs\";s:283:\"[{\"url\":\"http:\\/\\/codevigilant.com\\/disclosure\\/wp-plugin-spreadshirt-rss-3d-cube-flash-gallery-a3-cross-site-scripting-xss\\/\",\"name\":\"http:\\/\\/codevigilant.com\\/disclosure\\/wp-plugin-spreadshirt-rss-3d-cube-flash-gallery-a3-cross-site-scripting-xss\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:978;O:8:\"stdClass\":4:{s:6:\"CVE_ID\";s:14:\"CVE-2019-20203\";s:4:\"slug\";s:6:\"postie\";s:11:\"description\";s:169:\"The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From information of an email message.\";s:4:\"refs\";s:501:\"[{\"url\":\"https:\\/\\/github.com\\/V1n1v131r4\\/Exploiting-Postie-WordPress-Plugin-\\/blob\\/master\\/README.md\",\"name\":\"https:\\/\\/github.com\\/V1n1v131r4\\/Exploiting-Postie-WordPress-Plugin-\\/blob\\/master\\/README.md\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/postieplugin.com\\/\",\"name\":\"https:\\/\\/postieplugin.com\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/postie\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/postie\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:979;O:8:\"stdClass\":4:{s:6:\"CVE_ID\";s:14:\"CVE-2019-20180\";s:4:\"slug\";s:6:\"ignore\";s:11:\"description\";s:213:\"The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users.\r\n\r\nLow impact, this can be created by any editor and problem lies in CSV format in general, so the issue is minimal.\";s:4:\"refs\";s:263:\"[{\"url\":\"https:\\/\\/medium.com\\/@Pablo0xSantiago\\/cve-2019-20180-tablepress-version-1-9-2-csv-injection-65309fcc8be8\",\"name\":\"https:\\/\\/medium.com\\/@Pablo0xSantiago\\/cve-2019-20180-tablepress-version-1-9-2-csv-injection-65309fcc8be8\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:980;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:14:\"CVE-2019-20181\";s:4:\"slug\";s:15:\"awesome-support\";s:13:\"versionImpact\";s:5:\"5.8.0\";s:11:\"description\";s:87:\"The awesome-support plugin 5.8.0 for WordPress allows XSS via the post_title parameter.\";s:4:\"refs\";s:297:\"[{\"url\":\"https:\\/\\/medium.com\\/@Pablo0xSantiago\\/cve-2019-20181-awesome-support-wordpress-helpdesk-support-plugin-5-8-0-84a0c022cf53\",\"name\":\"https:\\/\\/medium.com\\/@Pablo0xSantiago\\/cve-2019-20181-awesome-support-wordpress-helpdesk-support-plugin-5-8-0-84a0c022cf53\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:981;O:8:\"stdClass\":6:{s:6:\"CVE_ID\";s:13:\"CVE-2014-4561\";s:4:\"slug\";s:23:\"ultimate-weather-plugin\";s:13:\"versionImpact\";s:1:\"1\";s:11:\"description\";s:53:\"The ultimate-weather plugin 1.0 for WordPress has XSS\";s:14:\"recommendation\";s:126:\"This plugin has been closed and is no longer available for download.\r\n\r\nhttps://wordpress.org/plugins/ultimate-weather-plugin/\";s:4:\"refs\";s:255:\"[{\"url\":\"http:\\/\\/codevigilant.com\\/disclosure\\/wp-plugin-ultimate-weather-plugin-a3-cross-site-scripting-xss\\/\",\"name\":\"http:\\/\\/codevigilant.com\\/disclosure\\/wp-plugin-ultimate-weather-plugin-a3-cross-site-scripting-xss\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:982;O:8:\"stdClass\":6:{s:6:\"CVE_ID\";s:13:\"CVE-2020-6849\";s:4:\"slug\";s:26:\"marketo-forms-and-tracking\";s:13:\"versionImpact\";s:5:\"1.0.2\";s:11:\"description\";s:133:\"The marketo-forms-and-tracking plugin through 1.0.2 for WordPress allows wp-admin/admin.php?page=marketo_fat CSRF with resultant XSS.\";s:14:\"recommendation\";s:136:\"This plugin has been closed as of December 11, 2019 and is not available for download. This closure is temporary, pending a full review.\";s:4:\"refs\";s:449:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/marketo-forms-and-tracking\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/marketo-forms-and-tracking\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10031\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10031\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/zeroauth.ltd\\/blog\\/\",\"name\":\"https:\\/\\/zeroauth.ltd\\/blog\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:983;O:8:\"stdClass\":6:{s:6:\"CVE_ID\";s:13:\"CVE-2020-8658\";s:4:\"slug\";s:8:\"htaccess\";s:13:\"versionImpact\";s:5:\"1.8.1\";s:11:\"description\";s:443:\"The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF. The flag htccss_nonce_name passes the nonce to WordPress but the plugin does not validate it correctly, resulting in a wrong implementation of anti-CSRF protection. In this way, an attacker is able to direct the victim to a malicious web page that modifies the .htaccess file, and takes control of the website.\";s:14:\"recommendation\";s:188:\"This plugin has been closed as of February 6, 2020 and is not available for download. This closure is temporary, pending a full review.\r\n\r\nhttps://wordpress.org/plugins/htaccess/#developer\";s:4:\"refs\";s:559:\"[{\"url\":\"https:\\/\\/github.com\\/V1n1v131r4\\/Exploiting-WP-Htaccess-by-BestWebSoft-Plugin\\/blob\\/master\\/README.md\",\"name\":\"https:\\/\\/github.com\\/V1n1v131r4\\/Exploiting-WP-Htaccess-by-BestWebSoft-Plugin\\/blob\\/master\\/README.md\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/htaccess\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/htaccess\\/#developers\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10060\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10060\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:984;O:8:\"stdClass\":4:{s:6:\"CVE_ID\";s:13:\"CVE-2019-6267\";s:4:\"slug\";s:21:\"easy-redirect-manager\";s:11:\"description\";s:189:\"The Premium WP Suite Easy Redirect Manager plugin 28.07-17 for WordPress has XSS via a crafted GET request that is mishandled during log viewing at the templates/admin/redirect-log.php URI.\";s:4:\"refs\";s:618:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/easy-redirect-manager\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/easy-redirect-manager\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Product\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9203\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9203\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/www.logicallysecure.com\\/blog\\/ls-team-discovers-xss-in-wordpress-plugin\\/\",\"name\":\"https:\\/\\/www.logicallysecure.com\\/blog\\/ls-team-discovers-xss-in-wordpress-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:985;O:8:\"stdClass\":4:{s:6:\"CVE_ID\";s:13:\"CVE-2020-9334\";s:4:\"slug\";s:19:\"envira-gallery-lite\";s:11:\"description\";s:258:\"A stored XSS vulnerability exists in the Envira Photo Gallery plugin through 1.7.6 for WordPress. Successful exploitation of this vulnerability would allow a authenticated low-privileged user to inject arbitrary JavaScript code that is viewed by other users.\";s:4:\"refs\";s:385:\"[{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/envira-gallery-lite\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/envira-gallery-lite\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10089\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10089\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:986;O:8:\"stdClass\":6:{s:6:\"CVE_ID\";s:13:\"CVE-2020-9466\";s:4:\"slug\";s:12:\"export-users\";s:13:\"versionImpact\";s:3:\"1.5\";s:11:\"description\";s:80:\"The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection.\";s:14:\"recommendation\";s:110:\"This plugin has been closed as of February 27, 2020 and is not available for download. Reason: Security Issue.\";s:4:\"refs\";s:621:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10094\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10094\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.getastra.com\\/blog\\/911\\/plugin-exploit\\/csv-injection-in-export-users-to-csv-wordpress-plugin\\/\",\"name\":\"https:\\/\\/www.getastra.com\\/blog\\/911\\/plugin-exploit\\/csv-injection-in-export-users-to-csv-wordpress-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/www.jinsonvarghese.com\\/csv-injection-in-export-users-to-csv-plugin\\/\",\"name\":\"https:\\/\\/www.jinsonvarghese.com\\/csv-injection-in-export-users-to-csv-plugin\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:987;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2019-9618\";s:4:\"slug\";s:23:\"gracemedia-media-player\";s:13:\"versionImpact\";s:3:\"1.0\";s:11:\"description\";s:105:\"The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the \"cfg\" parameter.\";s:4:\"refs\";s:821:\"[{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2019\\/Mar\\/26\",\"name\":\"20190319 WordPress Plugin GraceMedia Media Player 1.0 - Local File Inclusion\",\"refsource\":\"FULLDISC\",\"tags\":[\"Exploit\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2019\\/Mar\\/32\",\"name\":\"20190319 Re: WordPress Plugin GraceMedia Media Player 1.0 - Local File Inclusion\",\"refsource\":\"FULLDISC\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wordpress.org\\/plugins\\/gracemedia-media-player\\/#developers\",\"name\":\"https:\\/\\/wordpress.org\\/plugins\\/gracemedia-media-player\\/#developers\",\"refsource\":\"MISC\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9234\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9234\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:988;O:8:\"stdClass\":5:{s:6:\"CVE_ID\";s:13:\"CVE-2019-9908\";s:4:\"slug\";s:14:\"font-organizer\";s:13:\"versionImpact\";s:5:\"2.1.1\";s:11:\"description\";s:98:\"The font-organizer plugin 2.1.1 for WordPress has wp-admin/options-general.php manage_font_id XSS.\";s:4:\"refs\";s:829:\"[{\"url\":\"http:\\/\\/seclists.org\\/fulldisclosure\\/2019\\/Mar\\/37\",\"name\":\"20190322 Re: Font_Organizer 2.1.1 - Reflected XSS (WordPress Plugin)\",\"refsource\":\"FULLDISC\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/02\\/05\\/8\",\"name\":\"https:\\/\\/lists.openwall.net\\/full-disclosure\\/2019\\/02\\/05\\/8\",\"refsource\":\"MISC\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/security-consulting.icu\\/blog\\/2019\\/02\\/wordpress-font-organizer-xss\\/\",\"name\":\"https:\\/\\/security-consulting.icu\\/blog\\/2019\\/02\\/wordpress-font-organizer-xss\\/\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9239\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9239\",\"refsource\":\"MISC\",\"tags\":[\"Third Party Advisory\"]}]\";}i:989;O:8:\"stdClass\":6:{s:6:\"CVE_ID\";s:14:\"CVE-2020-10817\";s:4:\"slug\";s:35:\"custom-searchable-data-entry-system\";s:13:\"versionImpact\";s:5:\"1.7.1\";s:11:\"description\";s:174:\"The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued.\";s:14:\"recommendation\";s:186:\"This plugin has been closed as of March 12, 2020 and is not available for download. This closure is permanent. Details: https://wordpress.org/plugins/custom-searchable-data-entry-system/\";s:4:\"refs\";s:319:\"[{\"url\":\"http:\\/\\/avveng.com\\/cve.html\",\"name\":\"http:\\/\\/avveng.com\\/cve.html\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/plugins.trac.wordpress.org\\/log\\/custom-searchable-data-entry-system\\/\",\"name\":\"https:\\/\\/plugins.trac.wordpress.org\\/log\\/custom-searchable-data-entry-system\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}}s:6:\"themes\";a:9:{i:0;O:8:\"stdClass\":7:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15869\";s:4:\"slug\";s:9:\"jobcareer\";s:13:\"versionImpact\";s:0:\"\";s:19:\"versionEndExcluding\";s:5:\"2.5.1\";s:11:\"description\";s:62:\"The JobCareer theme before 2.5.1 for WordPress has stored XSS.\";s:14:\"recommendation\";s:0:\"\";s:4:\"refs\";s:173:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9322\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9322\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:1;O:8:\"stdClass\":7:{s:6:\"CVE_ID\";s:14:\"CVE-2019-15870\";s:4:\"slug\";s:7:\"carspot\";s:13:\"versionImpact\";s:0:\"\";s:19:\"versionEndExcluding\";s:5:\"2.1.7\";s:11:\"description\";s:87:\"The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.\";s:14:\"recommendation\";s:0:\"\";s:4:\"refs\";s:173:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9258\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9258\",\"refsource\":\"MISC\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]\";}i:2;O:8:\"stdClass\":7:{s:6:\"CVE_ID\";s:14:\"CVE-2019-19542\";s:4:\"slug\";s:10:\"listingpro\";s:13:\"versionImpact\";s:0:\"\";s:19:\"versionEndExcluding\";s:8:\"2.0.14.5\";s:11:\"description\";s:125:\"The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page.\";s:14:\"recommendation\";s:0:\"\";s:4:\"refs\";s:141:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9974\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9974\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:3;O:8:\"stdClass\":7:{s:6:\"CVE_ID\";s:14:\"CVE-2019-19540\";s:4:\"slug\";s:10:\"listingpro\";s:13:\"versionImpact\";s:0:\"\";s:19:\"versionEndExcluding\";s:8:\"2.0.14.2\";s:11:\"description\";s:105:\"The ListingPro theme before v2.0.14.2 for WordPress has Reflected XSS via the What field on the homepage.\";s:14:\"recommendation\";s:0:\"\";s:4:\"refs\";s:141:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9974\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9974\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:4;O:8:\"stdClass\":7:{s:6:\"CVE_ID\";s:14:\"CVE-2019-19541\";s:4:\"slug\";s:10:\"listingpro\";s:13:\"versionImpact\";s:0:\"\";s:19:\"versionEndExcluding\";s:8:\"2.0.14.2\";s:11:\"description\";s:131:\"The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page.\";s:14:\"recommendation\";s:0:\"\";s:4:\"refs\";s:141:\"[{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9974\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/9974\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:5;O:8:\"stdClass\":7:{s:6:\"CVE_ID\";s:14:\"CVE-2020-17362\";s:4:\"slug\";s:9:\"nova-lite\";s:13:\"versionImpact\";s:0:\"\";s:19:\"versionEndExcluding\";s:5:\"1.3.9\";s:11:\"description\";s:82:\"search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.\";s:14:\"recommendation\";s:0:\"\";s:4:\"refs\";s:224:\"[{\"url\":\"https:\\/\\/themes.trac.wordpress.org\\/browser\\/nova-lite\\/1.3.9\\/readme.txt?rev=134076\",\"name\":\"https:\\/\\/themes.trac.wordpress.org\\/browser\\/nova-lite\\/1.3.9\\/readme.txt?rev=134076\",\"refsource\":\"CONFIRM\",\"tags\":[]}]\";}i:6;O:8:\"stdClass\":7:{s:6:\"CVE_ID\";s:14:\"CVE-2019-20209\";s:4:\"slug\";s:8:\"easybook\";s:13:\"versionImpact\";s:0:\"\";s:19:\"versionEndExcluding\";s:5:\"1.2.2\";s:11:\"description\";s:211:\"The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php to delete any page/post/listing.\";s:14:\"recommendation\";s:0:\"\";s:4:\"refs\";s:1517:\"[{\"url\":\"https:\\/\\/cxsecurity.com\\/issue\\/WLB-2019120110\",\"name\":\"https:\\/\\/cxsecurity.com\\/issue\\/WLB-2019120110\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/cxsecurity.com\\/issue\\/WLB-2019120111\",\"name\":\"https:\\/\\/cxsecurity.com\\/issue\\/WLB-2019120111\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/cxsecurity.com\\/issue\\/WLB-2019120112\",\"name\":\"https:\\/\\/cxsecurity.com\\/issue\\/WLB-2019120112\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/themeforest.net\\/item\\/citybook-directory-listing-wordpress-theme\\/21694727\",\"name\":\"https:\\/\\/themeforest.net\\/item\\/citybook-directory-listing-wordpress-theme\\/21694727\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/themeforest.net\\/item\\/easybook-directory-listing-wordpress-theme\\/23206622\",\"name\":\"https:\\/\\/themeforest.net\\/item\\/easybook-directory-listing-wordpress-theme\\/23206622\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/themeforest.net\\/item\\/townhub-directory-listing-wordpress-theme\\/25019571\",\"name\":\"https:\\/\\/themeforest.net\\/item\\/townhub-directory-listing-wordpress-theme\\/25019571\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10013\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10013\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10014\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10014\",\"refsource\":\"MISC\",\"tags\":[]},{\"url\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10018\",\"name\":\"https:\\/\\/wpvulndb.com\\/vulnerabilities\\/10018\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:7;O:8:\"stdClass\":7:{s:6:\"CVE_ID\";s:14:\"CVE-2019-17230\";s:4:\"slug\";s:7:\"onetone\";s:13:\"versionImpact\";s:0:\"\";s:19:\"versionEndExcluding\";s:0:\"\";s:11:\"description\";s:117:\"includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes.\";s:14:\"recommendation\";s:196:\"This theme is not maintained anymore and the vulnerability has never been fixed. Details: https://blog.nintechnet.com/unauthenticated-stored-xss-vulnerability-in-wordpress-onetone-theme-unpatched/\";s:4:\"refs\";s:271:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/unauthenticated-stored-xss-vulnerability-in-wordpress-onetone-theme-unpatched\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/unauthenticated-stored-xss-vulnerability-in-wordpress-onetone-theme-unpatched\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}i:8;O:8:\"stdClass\":7:{s:6:\"CVE_ID\";s:14:\"CVE-2019-17231\";s:4:\"slug\";s:7:\"onetone\";s:13:\"versionImpact\";s:0:\"\";s:19:\"versionEndExcluding\";s:0:\"\";s:11:\"description\";s:109:\"includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues.\";s:14:\"recommendation\";s:203:\"This theme is not maintained anymore and the vulnerability has never been fixed. - More details: https://blog.nintechnet.com/unauthenticated-stored-xss-vulnerability-in-wordpress-onetone-theme-unpatched/\";s:4:\"refs\";s:271:\"[{\"url\":\"https:\\/\\/blog.nintechnet.com\\/unauthenticated-stored-xss-vulnerability-in-wordpress-onetone-theme-unpatched\\/\",\"name\":\"https:\\/\\/blog.nintechnet.com\\/unauthenticated-stored-xss-vulnerability-in-wordpress-onetone-theme-unpatched\\/\",\"refsource\":\"MISC\",\"tags\":[]}]\";}}s:12:\"plugin_vulns\";i:990;s:11:\"theme_vulns\";i:9;s:8:\"wp_vulns\";i:93;s:7:\"updated\";s:19:\"2021-01-07 17:45:07\";s:9:\"timestamp\";i:1615165784;}', 'no');
INSERT INTO `wp_options` (`option_id`, `option_name`, `option_value`, `autoload`) VALUES
(874105, 'wf_sn_options', 'a:7:{s:11:\"license_key\";s:0:\"\";s:14:\"license_active\";b:0;s:15:\"license_expires\";s:0:\"\";s:12:\"license_type\";s:0:\"\";s:12:\"license_hide\";b:0;s:13:\"first_version\";s:7:\"5.114.1\";s:13:\"first_install\";i:1613139878;}', 'yes'),
(874112, 'wf_sn_review_notice', 'a:2:{s:4:\"time\";i:1614349480;s:9:\"dismissed\";b:0;}', 'no'),
(874911, 'wf_sn_vu_settings_group', 'a:3:{s:12:\"enable_vulns\";i:1;s:15:\"enable_outdated\";i:0;s:25:\"enable_admin_notification\";i:0;}', 'yes'),
(922901, 'jetpack_nonce_1633417477_pOvL1ubQ1z', '1633417479', 'no'),
(885491, 'jetpack_nonce_1617966378_ohhpmHFNQu', '1617966380', 'no'),
(885492, 'jetpack_nonce_1617966379_9ba9awGhiT', '1617966383', 'no'),
(885493, 'jetpack_nonce_1617966385_0hn7jptXcZ', '1617966389', 'no'),
(885494, 'jetpack_nonce_1617966387_MEW2HkaT0r', '1617966391', 'no'),
(885646, 'jetpack_nonce_1617976435_zHBX0wV6n0', '1617976438', 'no'),
(874131, 'wfsn_freemius_state', 'in', 'no');
INSERT INTO `wp_options` (`option_id`, `option_name`, `option_value`, `autoload`) VALUES
(874134, 'wf_sn_active_plugins', 'a:7:{s:33:\"security-ninja/security-ninja.php\";a:25:{s:4:\"name\";s:67:\"Security Ninja &#8211; Secure Firewall &amp; Secure Malware Scanner\";s:4:\"slug\";s:14:\"security-ninja\";s:7:\"version\";s:7:\"5.114.1\";s:6:\"author\";s:60:\"<a href=\"https://wpsecurityninja.com/\">WP Security Ninja</a>\";s:14:\"author_profile\";s:44:\"https://profiles.wordpress.org/cleverplugins\";s:8:\"requires\";s:3:\"4.7\";s:6:\"tested\";s:5:\"5.6.1\";s:12:\"requires_php\";s:3:\"5.6\";s:13:\"compatibility\";a:0:{}s:6:\"rating\";i:96;s:7:\"ratings\";a:5:{i:5;i:67;i:4;i:1;i:3;i:0;i:2;i:1;i:1;i:3;}s:11:\"num_ratings\";i:72;s:15:\"support_threads\";i:5;s:24:\"support_threads_resolved\";i:5;s:10:\"downloaded\";i:220446;s:12:\"last_updated\";s:21:\"2021-02-07 2:08am GMT\";s:5:\"added\";s:10:\"2016-08-30\";s:8:\"homepage\";s:28:\"https://wpsecurityninja.com/\";s:8:\"sections\";a:5:{s:11:\"description\";s:8967:\"<p>For over 9 years Security Ninja has helped thousands <strong>site owners like you to feel safe</strong>. Run 50+ security tests <strong>in an instant</strong> &amp; discover issues you didn&#8217;t even know existed. <strong>Help yourself now</strong> with Ninja&#8217;s simplicity &amp; ease of use.</p>\n<p><strong>NEW: Vulnerability scanner</strong> &#8211; Warns you if you have plugins with known vulnerabilities installed.</p>\n<span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe class=\'youtube-player\' width=\'640\' height=\'360\' src=\'https://www.youtube.com/embed/d4cqQIkkMXM?version=3&#038;rel=1&#038;showsearch=0&#038;showinfo=1&#038;iv_load_policy=1&#038;fs=1&#038;hl=en-US&#038;autohide=2&#038;wmode=transparent\' allowfullscreen=\'true\' style=\'border:0;\' sandbox=\'allow-scripts allow-same-origin allow-popups allow-presentation\'></iframe></span>\n<blockquote>\n<p>Automatically block <strong>600+ million bad IPs</strong> with one click! <a href=\"https://wpsecurityninja.com/?utm_source=wordpressorg&amp;utm_medium=content&amp;utm_campaign=readme&amp;utm_content=cloud-firewall\" rel=\"nofollow ugc\">Security Ninja Pro Cloud Firewall</a> will help you stay one step ahead of bad guys by using the collective know-how of millions of attacked sites, and ban bad guys before they even open your site.</p>\n</blockquote>\n<p>Read more about Pro features on the <a href=\"https://wpsecurityninja.com/?utm_source=wordpressorg&amp;utm_medium=content&amp;utm_campaign=readme&amp;utm_content=readmoreaboutpro\" rel=\"nofollow ugc\">Security Ninja website</a></p>\n<ul>\n<li>perform <strong>50+ security tests</strong> with one click</li>\n<li>Security Ninja does not make any changes &#8211; it&#8217;s your site, you have full control</li>\n<li>check your site for security vulnerabilities, issues &amp; holes</li>\n<li>take preventive measures against attacks</li>\n<li>don’t let script kiddies hack your site</li>\n<li>prevent 0-day exploit attacks</li>\n<li>optimize and speed-up your database</li>\n<li>every test is explained, documented and instructions provided on how to fix problems</li>\n<li>tests include:\n<ul>\n<li>brute-force attack on user accounts to test password strength</li>\n<li>numerous installation parameters tests</li>\n<li>file permissions</li>\n<li>version hiding</li>\n<li>0-day exploits tests</li>\n<li>debug and auto-update modes tests</li>\n<li>database configuration tests</li>\n<li>Apache and PHP related tests</li>\n<li>WP options tests</li>\n</ul>\n</li>\n<li>complete list of tests:\n<ul>\n<li>Check if Application Passwords feature is enabled (new to WP 5.6)</li>\n<li>Check if WordPress core is up to date</li>\n<li>Check if automatic WordPress core updates are enabled</li>\n<li>Check if plugins are up to date</li>\n<li>Check if there are deactivated plugins</li>\n<li>Check if active plugins have been updated in the last 12 months</li>\n<li>Check if active plugins are compatible with your version of WP</li>\n<li>Check if themes are up to date</li>\n<li>Check if there are any deactivated themes</li>\n<li>Check if full WordPress version info is revealed in page&#8217;s meta data</li>\n<li>Check if readme.html file is accessible via HTTP on the default location</li>\n<li>Check if license.txt file is accessible via HTTP on the default location</li>\n<li>Check if REST API links are displayed in page&#8217;s meta data</li>\n<li>Check the PHP version is up to date</li>\n<li>Check the MySQL version</li>\n<li>Check if server response headers contain detailed PHP version info</li>\n<li>Check if expose_php PHP directive is turned off</li>\n<li>Check if user with username &#8220;admin&#8221; and administrator privileges exists</li>\n<li>Check if &#8220;anyone can register&#8221; option is enabled</li>\n<li>Check user&#8217;s password strength with a brute-force attack</li>\n<li>Check for display of unnecessary information on failed login attempts</li>\n<li>Check if database table prefix is the default one</li>\n<li>Check if security keys and salts have proper values</li>\n<li>Check the age of security keys and salts</li>\n<li>Test the strength of WordPress database password</li>\n<li>Check if general debug mode is enabled</li>\n<li>Check if the debug.log file exists</li>\n<li>Check if database debug mode is enabled</li>\n<li>Check if JavaScript debug mode is enabled</li>\n<li>Check if display_errors PHP directive is turned off</li>\n<li>Check if WordPress installation address is the same as the site address</li>\n<li>Check if wp-config.php file has the right permissions (chmod) set</li>\n<li>Check if install.php file is accessible via HTTP on the default location</li>\n<li>Check if upgrade.php file is accessible via HTTP on the default location</li>\n<li>Check if register_globals PHP directive is turned off</li>\n<li>Check if PHP safe mode is disabled</li>\n<li>Check if allow_url_include PHP directive is turned off</li>\n<li>Check if plugins/themes file editor is enabled</li>\n<li>Check if uploads folder is browsable by browsers</li>\n<li>Test if user with ID “1” and administrator role exists</li>\n<li>Check if Windows Live Writer link is present in pages’ header data</li>\n<li>Check if wp-config.php is present on the default location</li>\n<li>Check if MySQL server is connectable from outside with the WP user</li>\n<li>Check if EditURI link is present in pages’ header data</li>\n<li>Check if TimThumb script is used in the active theme</li>\n<li>Check if the server is vulnerable to the Shellshock bug #6271</li>\n<li>Check if the server is vulnerable to the Shellshock bug #7169</li>\n<li>Check if admin interface is delivered via SSL</li>\n<li>Check if MySQL account used by WordPress has too many permissions</li>\n<li>Test if a list of usernames can be fetched by looping through user IDs on http://siteurl.com/?author={ID}</li>\n<li>Check if server response headers contain Strict-Transport-Security</li>\n<li>Check if server response headers contain X-XSS-Protection</li>\n<li>Check if server response headers contain X-Frame-Options</li>\n<li>Check if server response headers contain X-Content-Type-Options</li>\n<li>Check if server response headers contain Content-Security-Policy</li>\n<li>Check if server response headers contain Strict-Transport-Security</li>\n<li>Check if server response headers contain Referrer-Policy</li>\n<li>Check if server response headers contain Feature-Policy</li>\n<li>Check for unwanted files in your root folder you should remove</li>\n</ul>\n</li>\n</ul>\n<blockquote>\n<blockquote>\n<p>Security Ninja <strong>PRO</strong>  has extra features: Firewall, Block Suspicious Page Requests, Country Blocking, Core Scanner, Malware Scanner, Auto Fixer for some of the tests, Events Logger &amp; Scheduled Scans.</p>\n</blockquote>\n</blockquote>\n<p>An all-in-one security solution for any site. With premium support and continuous updates Security Ninja <strong>Pro</strong> is a perfect tool to keep your site safe. <a href=\"https://wpsecurityninja.com/?utm_source=wordpressorg&amp;utm_medium=content&amp;utm_campaign=readme&amp;utm_content=see-what-pro-offers\" rel=\"nofollow ugc\">See what the PRO version offers</a></p>\n<p>Add your suggestions to <a href=\"https://trello.com/b/6qxtAlzY/wp-security-ninja-public-roadmap\" rel=\"nofollow ugc\">the public roadmap</a> or vote for your favorite new feature.</p>\n<p><strong>What others say about the plugin</strong></p>\n<ul>\n<li><a href=\"https://wplift.com/security-ninja-review\" rel=\"nofollow ugc\">WPLift</a></li>\n<li><a href=\"https://www.wpexplorer.com/wordpress-security-can-security-ninja-keep-your-site-safe/\" rel=\"nofollow ugc\">WPExplorer</a></li>\n<li><a href=\"https://tutorials7.com/security-ninja-review.html\" rel=\"nofollow ugc\">Tutorials 7</a></li>\n<li><a href=\"https://wploop.com/security-ninja-review/\" rel=\"nofollow ugc\">WP Loop</a></li>\n<li><a href=\"https://www.bitcatcha.com/blog/security-ninja-plugin-review/\" rel=\"nofollow ugc\">Bitcatcha</a></li>\n<li><a href=\"https://www.webhostingsecretrevealed.net/blog/wordpress-blog/10-actionable-wordpress-security-tips/\" rel=\"nofollow ugc\">WebHostingSecretRevealed</a></li>\n<li><a href=\"https://www.ravisinghblog.in/wp-security-ninja-review/\" rel=\"nofollow ugc\">Ravi Singh</a></li>\n</ul>\n<p><strong>License info</strong></p>\n<ul>\n<li>\n<p><a href=\"https://github.com/carhartl/jquery-cookie\" rel=\"nofollow ugc\">jQuery Cookie Plugin, Copyright 2013 Klaus Hartl</a></p>\n</li>\n<li>\n<p>The vulnerability scanner uses data from the <a href=\"https://nvd.nist.gov/\" rel=\"nofollow ugc\">National Vulnerability Database &#8211; NVD</a></p>\n</li>\n<li>\n<p>This product includes IP2Location LITE data available from <a href=\"https://lite.ip2location.com\" rel=\"nofollow ugc\">https://lite.ip2location.com</a>.</p>\n</li>\n<li>\n<p>This plugin uses the <a href=\"https://github.com/collizo4sky/persist-admin-notices-dismissal\" rel=\"nofollow ugc\">Persist Admin notice Dismissals</a> by Collins Agbonghama @collizo4sky</p>\n</li>\n</ul>\n<p><a href=\"http://coderisk.com/wp/plugin/security-ninja/RIPS-qKhARdCjrV\" rel=\"nofollow ugc\"></a></p>\n\";s:12:\"installation\";s:653:\"<h4>Installing from WordPress</h4>\n<ol>\n<li>Open WordPress admin, go to Plugins, click Add New</li>\n<li>Enter &#8220;Security Ninja&#8221; in search and hit Enter</li>\n<li>Plugin will show up as the first on the list, click &#8220;Install Now&#8221;</li>\n<li>Activate &amp; go to Tools &#8211; Security Ninja to make your site more secure</li>\n</ol>\n<h4>Installing Manually</h4>\n<ol>\n<li>Download the plugin.</li>\n<li>Unzip it and upload to <em>wp-content/plugin/</em></li>\n<li>Open WordPress admin &#8211; Plugins and click &#8220;Activate&#8221; next to the plugin</li>\n<li>Activate &amp; go to Security Ninja to make your site more secure</li>\n</ol>\n\";s:3:\"faq\";s:1787:\"\n<dt id=\'who%20is%20this%20plugin%20for%3F\'>\nWho is this plugin for?\n</h4>\n<p>\n<p>For anyone who wants to make their site more secure and prevent downtime due to hackers</p>\n</p>\n<dt id=\'will%20this%20plugin%20slow%20my%20site%20down%3F\'>\nWill this plugin slow my site down?\n</h4>\n<p>\n<p>Absolutely not. You may experience a slight slow down while tests are being run but that takes less than a minute.</p>\n</p>\n<dt id=\'will%20it%20work%20on%20my%20theme%3F\'>\nWill it work on my theme?\n</h4>\n<p>\n<p>Sure! Security Ninja works with all themes.</p>\n</p>\n<dt id=\'what%20changes%20will%20security%20ninja%20make%20to%20my%20site%3F\'>\nWhat changes will Security Ninja make to my site?\n</h4>\n<p>\n<p>None! Security Ninja will just give you the test results and suggest corrective measures with precise instruction. It will not make any changes to your site.</p>\n</p>\n<dt id=\'is%20this%20plugin%20safe%20to%20use%3F\'>\nIs this plugin safe to use?\n</h4>\n<p>\n<p>Of course. It&#8217;s a reporting-only tool. It doesn&#8217;t make any changes to your site.</p>\n</p>\n<dt id=\'is%20this%20plugin%20legal%20to%20use%3F\'>\nIs this plugin legal to use?\n</h4>\n<p>\n<p>Yes. It&#8217;s your site you can do whatever you want with it. Running tests on other people&#8217;s sites is illegal but Security Ninja can only perform tests on the WordPress page it&#8217;s installed on.</p>\n</p>\n<dt id=\'it%27s%20not%20working%21%21%21%20arrrrrrrrr\'>\nIt&#8217;s not working!!! Arrrrrrrrr\n</h4>\n<p>\n<p>We did our very best to make Security Ninja compatible with all plugins and themes, but problems can still happen.</p>\n<p>Check out the community support &#8211; head over to the <a href=\"https://wordpress.org/support/plugin/security-ninja\">support forum</a> open a new thread, and we&#8217;ll help you ASAP.</p>\n</p>\n\n\";s:9:\"changelog\";s:4053:\"<h4>5.114.1</h4>\n<ul>\n<li>2021/02/04</li>\n<li>Quick fix for PHP notice showing up in debug log on some websites.</li>\n<li>216,033 downloads</li>\n</ul>\n<h4>5.114</h4>\n<ul>\n<li>2021/02/04</li>\n<li>NEW: Settings for vulnerability module &#8211; control what is being checked for and disable the counter in the admin menu.</li>\n<li>Improved plugin loading time &#8211; Doing more tasks in background.</li>\n<li><strong>Pro Changes:</strong> </li>\n<li>NEW: Wizard &#8211; Get started in minutes with a few simple steps &#8211; protect your website with ease.</li>\n<li>NEW: Introducing IP ban network &#8211; all sites reports heavy attacks to a central API to send out block warning to all sites in the network.</li>\n<li>NEW: Fixes: Disable WP XML Sitemaps introduced in WordPress 5.5</li>\n<li>NEW: Fixes: Enable/disable username enumeration</li>\n<li>Import/export works with vulnerability settings.</li>\n<li>Improved handling of importing data.</li>\n<li>Removed debug page in plugin in favor of &#8220;Site Health&#8221; included with WP.</li>\n<li>213,303 downloads</li>\n</ul>\n<h4>5.113</h4>\n<ul>\n<li>2020/12/28</li>\n<li>Fix: MySQL no longer creates database tables with &#8220;MyISAM&#8221; as the engine. Uses the site default configuration. Thank you Kien.</li>\n<li>Fix: &#8220;Test this IP&#8221; did not work correctly with IP ranges. Thank you Justin.</li>\n<li>Fix: Core Scanner module &#8211; now works faster and loads data without reloading the entire plugin page. Improved user interface.</li>\n<li>205,441 downloads</li>\n</ul>\n<h4>5.112</h4>\n<ul>\n<li>2020/12/10</li>\n<li>New: Check for Application Password feature introduced in WP 5.6</li>\n<li>New: Enable/disable the Application Password feature (Pro)</li>\n<li>Fix: PHP notice when downloading and saving vulnerability list.</li>\n<li>Tested with WordPress 5.6</li>\n<li>201,061 downloads</li>\n</ul>\n<h4>5.111</h4>\n<ul>\n<li>2020/11/09</li>\n<li>Update Freemius to 2.4.1 and other 3rd party libraries.</li>\n<li>193,411 downloads</li>\n</ul>\n<h4>5.110</h4>\n<ul>\n<li>2020/09/30</li>\n<li>NEW: Fixes page &#8211; Enable/disable security features on your website.</li>\n<li>NEW: Set Security Headers values on &#8220;Fixes&#8221; page.</li>\n<li>NEW: Hide PHP Version and Server info.</li>\n<li>Improved user interface, made changes to colors and layout.</li>\n<li>Tested up to WP 5.5.1</li>\n<li>Further work on PHP compatibility &#8211; Thank you Barry.</li>\n<li>185,502 downloads</li>\n</ul>\n<h4>5.109</h4>\n<ul>\n<li>2020/09/03</li>\n<li>FIX &#8211; Nginx example corrected for &#8220;Referrer-Policy&#8221; from &#8220;no-referrer&#8221; to the correct &#8220;same-origin&#8221;. Thank you Mk.</li>\n<li>FIX &#8211; Nginx example corrected for &#8220;Feature-Policy&#8221; security header. Thank you Mk.</li>\n<li>FIX &#8211; &#8220;Secure the site&#8221; showing up multiple places on plugins page in admin.</li>\n<li>Improvement &#8211; Better instructions on how to change weak database passwords and removing the autofixer.</li>\n<li>Minor cleanup in logging routines.</li>\n<li>Fix: Loading outdated plugin list from file instead of from database &#8211; caused problem on some servers.</li>\n<li>Fix: Wrongly saying &#8220;Vulnerabilities found&#8221; eventhough no vulns were found.</li>\n<li>Fix: Check for wp-config permissions (chmod) failed if the file had been moved. Thank you Mk.</li>\n<li>Fix: Minor error showing last blocked logins in sidebar.</li>\n<li>Updated 3rd party libraries for better PHP 7.4 compatibility.</li>\n<li>182,512 downloads</li>\n</ul>\n<h4>5.108</h4>\n<ul>\n<li>2020/08/11</li>\n<li>FIX: &#8220;Secure this site&#8221; link under all plugins. Thank you Mk.</li>\n<li>FIX: Opening up welcome page for all new plugin installations.</li>\n<li>Updating jQuery code due to changes to WordPress 5.5</li>\n<li>Tested WP 5.5 compatible.</li>\n<li>More detailed description in Firewall for &#8220;Hide login errors&#8221;.</li>\n<li>177,103 downloads</li>\n</ul>\n<p>&#8230;</p>\n<p>Entire changelog can be seen here: <a href=\"https://wpsecurityninja.com/changelog/\" rel=\"nofollow ugc\">changelog</a></p>\n\";s:11:\"screenshots\";s:1277:\"<ol><li><a href=\"https://ps.w.org/security-ninja/assets/screenshot-1.gif?rev=2144450\"><img src=\"https://ps.w.org/security-ninja/assets/screenshot-1.gif?rev=2144450\" alt=\"Fast &amp; easy to understand interface\"></a><p>Fast &amp; easy to understand interface</p></li><li><a href=\"https://ps.w.org/security-ninja/assets/screenshot-2.png?rev=2144450\"><img src=\"https://ps.w.org/security-ninja/assets/screenshot-2.png?rev=2144450\" alt=\"Security Ninja test results are simple and easy to read\"></a><p>Security Ninja test results are simple and easy to read</p></li><li><a href=\"https://ps.w.org/security-ninja/assets/screenshot-3.png?rev=2144450\"><img src=\"https://ps.w.org/security-ninja/assets/screenshot-3.png?rev=2144450\" alt=\"Every test has a detailed explanation and instructions on how to fix the problem\"></a><p>Every test has a detailed explanation and instructions on how to fix the problem</p></li><li><a href=\"https://ps.w.org/security-ninja/assets/screenshot-4.png?rev=2232519\"><img src=\"https://ps.w.org/security-ninja/assets/screenshot-4.png?rev=2232519\" alt=\"Vulnerable plugins list with details and recommendations - prevent known problems in plugin.\"></a><p>Vulnerable plugins list with details and recommendations - prevent known problems in plugin.</p></li></ol>\";}s:13:\"download_link\";s:65:\"https://downloads.wordpress.org/plugin/security-ninja.5.114.1.zip\";s:11:\"screenshots\";a:4:{i:1;a:2:{s:3:\"src\";s:67:\"https://ps.w.org/security-ninja/assets/screenshot-1.gif?rev=2144450\";s:7:\"caption\";s:39:\"Fast &amp; easy to understand interface\";}i:2;a:2:{s:3:\"src\";s:67:\"https://ps.w.org/security-ninja/assets/screenshot-2.png?rev=2144450\";s:7:\"caption\";s:55:\"Security Ninja test results are simple and easy to read\";}i:3;a:2:{s:3:\"src\";s:67:\"https://ps.w.org/security-ninja/assets/screenshot-3.png?rev=2144450\";s:7:\"caption\";s:80:\"Every test has a detailed explanation and instructions on how to fix the problem\";}i:4;a:2:{s:3:\"src\";s:67:\"https://ps.w.org/security-ninja/assets/screenshot-4.png?rev=2232519\";s:7:\"caption\";s:92:\"Vulnerable plugins list with details and recommendations - prevent known problems in plugin.\";}}s:4:\"tags\";a:5:{s:9:\"antivirus\";s:9:\"antivirus\";s:8:\"firewall\";s:8:\"firewall\";s:4:\"hack\";s:4:\"hack\";s:15:\"malware-scanner\";s:15:\"malware scanner\";s:8:\"security\";s:8:\"security\";}s:8:\"versions\";a:73:{s:3:\"2.0\";s:61:\"https://downloads.wordpress.org/plugin/security-ninja.2.0.zip\";s:4:\"2.05\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.2.05.zip\";s:4:\"2.10\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.2.10.zip\";s:4:\"2.15\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.2.15.zip\";s:4:\"2.20\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.2.20.zip\";s:4:\"2.25\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.2.25.zip\";s:4:\"2.30\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.2.30.zip\";s:4:\"2.35\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.2.35.zip\";s:4:\"2.40\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.2.40.zip\";s:4:\"2.45\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.2.45.zip\";s:4:\"2.46\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.2.46.zip\";s:4:\"2.50\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.2.50.zip\";s:5:\"5.100\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.100.zip\";s:5:\"5.101\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.101.zip\";s:5:\"5.102\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.102.zip\";s:5:\"5.103\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.103.zip\";s:5:\"5.104\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.104.zip\";s:5:\"5.106\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.106.zip\";s:5:\"5.108\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.108.zip\";s:5:\"5.110\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.110.zip\";s:5:\"5.111\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.111.zip\";s:5:\"5.112\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.112.zip\";s:5:\"5.113\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.113.zip\";s:5:\"5.114\";s:63:\"https://downloads.wordpress.org/plugin/security-ninja.5.114.zip\";s:7:\"5.114.1\";s:65:\"https://downloads.wordpress.org/plugin/security-ninja.5.114.1.zip\";s:4:\"5.50\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.50.zip\";s:4:\"5.51\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.51.zip\";s:4:\"5.52\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.52.zip\";s:4:\"5.53\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.53.zip\";s:4:\"5.54\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.54.zip\";s:4:\"5.55\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.55.zip\";s:4:\"5.56\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.56.zip\";s:4:\"5.57\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.57.zip\";s:4:\"5.58\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.58.zip\";s:4:\"5.59\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.59.zip\";s:4:\"5.60\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.60.zip\";s:4:\"5.61\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.61.zip\";s:4:\"5.62\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.62.zip\";s:4:\"5.63\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.63.zip\";s:4:\"5.64\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.64.zip\";s:4:\"5.65\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.65.zip\";s:4:\"5.66\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.66.zip\";s:4:\"5.67\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.67.zip\";s:4:\"5.69\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.69.zip\";s:4:\"5.70\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.70.zip\";s:4:\"5.71\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.71.zip\";s:4:\"5.72\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.72.zip\";s:4:\"5.75\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.75.zip\";s:4:\"5.76\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.76.zip\";s:4:\"5.77\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.77.zip\";s:4:\"5.78\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.78.zip\";s:4:\"5.79\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.79.zip\";s:4:\"5.80\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.80.zip\";s:4:\"5.81\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.81.zip\";s:4:\"5.82\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.82.zip\";s:4:\"5.83\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.83.zip\";s:4:\"5.84\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.84.zip\";s:4:\"5.85\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.85.zip\";s:4:\"5.86\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.86.zip\";s:4:\"5.87\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.87.zip\";s:4:\"5.88\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.88.zip\";s:4:\"5.89\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.89.zip\";s:4:\"5.90\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.90.zip\";s:4:\"5.91\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.91.zip\";s:4:\"5.92\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.92.zip\";s:4:\"5.93\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.93.zip\";s:4:\"5.94\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.94.zip\";s:4:\"5.95\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.95.zip\";s:4:\"5.96\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.96.zip\";s:4:\"5.97\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.97.zip\";s:4:\"5.98\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.98.zip\";s:4:\"5.99\";s:62:\"https://downloads.wordpress.org/plugin/security-ninja.5.99.zip\";s:5:\"trunk\";s:57:\"https://downloads.wordpress.org/plugin/security-ninja.zip\";}s:11:\"donate_link\";s:0:\"\";s:12:\"contributors\";a:0:{}}s:19:\"akismet/akismet.php\";a:25:{s:4:\"name\";s:23:\"Akismet Spam Protection\";s:4:\"slug\";s:7:\"akismet\";s:7:\"version\";s:5:\"4.1.8\";s:6:\"author\";s:66:\"<a href=\"https://automattic.com/wordpress-plugins/\">Automattic</a>\";s:14:\"author_profile\";s:41:\"https://profiles.wordpress.org/automattic\";s:8:\"requires\";s:3:\"4.6\";s:6:\"tested\";s:5:\"5.6.1\";s:12:\"requires_php\";b:0;s:13:\"compatibility\";a:0:{}s:6:\"rating\";i:94;s:7:\"ratings\";a:5:{i:5;i:797;i:4;i:43;i:3;i:13;i:2;i:8;i:1;i:39;}s:11:\"num_ratings\";i:900;s:15:\"support_threads\";i:9;s:24:\"support_threads_resolved\";i:5;s:10:\"downloaded\";i:188310787;s:12:\"last_updated\";s:21:\"2021-01-06 4:57pm GMT\";s:5:\"added\";s:10:\"2005-10-20\";s:8:\"homepage\";s:20:\"https://akismet.com/\";s:8:\"sections\";a:3:{s:11:\"description\";s:1034:\"<p>Akismet checks your comments and contact form submissions against our global database of spam to prevent your site from publishing malicious content. You can review the comment spam it catches on your blog&#8217;s &#8220;Comments&#8221; admin screen.</p>\n<p>Major features in Akismet include:</p>\n<ul>\n<li>Automatically checks all comments and filters out the ones that look like spam.</li>\n<li>Each comment has a status history, so you can easily see which comments were caught or cleared by Akismet and which were spammed or unspammed by a moderator.</li>\n<li>URLs are shown in the comment body to reveal hidden or misleading links.</li>\n<li>Moderators can see the number of approved comments for each user.</li>\n<li>A discard feature that outright blocks the worst spam, saving you disk space and speeding up your site.</li>\n</ul>\n<p>PS: You&#8217;ll be prompted to get an Akismet.com API key to use it, once activated. Keys are free for personal blogs; paid subscriptions are available for businesses and commercial sites.</p>\n\";s:12:\"installation\";s:136:\"<p>Upload the Akismet plugin to your blog, activate it, and then enter your Akismet.com API key.</p>\n<p>1, 2, 3: You&#8217;re done!</p>\n\";s:9:\"changelog\";s:1156:\"<h4>4.1.8</h4>\n<p><em>Release Date &#8211; 6 January 2021</em></p>\n<ul>\n<li>Fixed missing fields in submit-spam and submit-ham calls that could lead to reduced accuracy.</li>\n<li>Fixed usage of deprecated jQuery function.</li>\n</ul>\n<h4>4.1.7</h4>\n<p><em>Release Date &#8211; 22 October 2020</em></p>\n<ul>\n<li>Show the &#8220;Set up your Akismet account&#8221; banner on the comments admin screen, where it&#8217;s relevant to mention if Akismet hasn&#8217;t been configured.</li>\n<li>Don&#8217;t use wp_blacklist_check when the new wp_check_comment_disallowed_list function is available.</li>\n</ul>\n<h4>4.1.6</h4>\n<p><em>Release Date &#8211; 4 June 2020</em></p>\n<ul>\n<li>Disable &#8220;Check for Spam&#8221; button until the page is loaded to avoid errors with clicking through to queue recheck endpoint directly.</li>\n<li>Add filter &#8220;akismet_enable_mshots&#8221; to allow disabling screenshot popups on the edit comments admin page.</li>\n</ul>\n<p>For older changelog entries, please see the <a href=\"https://plugins.svn.wordpress.org/akismet/trunk/changelog.txt\" rel=\"nofollow ugc\">additional changelog.txt file</a> delivered with the plugin.</p>\n\";}s:13:\"download_link\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.1.8.zip\";s:11:\"screenshots\";a:0:{}s:4:\"tags\";a:5:{s:9:\"anti-spam\";s:9:\"anti-spam\";s:8:\"antispam\";s:8:\"antispam\";s:8:\"comments\";s:8:\"comments\";s:12:\"contact-form\";s:12:\"contact form\";s:4:\"spam\";s:4:\"spam\";}s:8:\"versions\";a:65:{s:5:\"2.2.5\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.2.5.zip\";s:5:\"2.2.6\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.2.6.zip\";s:5:\"2.2.7\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.2.7.zip\";s:5:\"2.2.8\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.2.8.zip\";s:5:\"2.2.9\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.2.9.zip\";s:5:\"2.3.0\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.3.0.zip\";s:5:\"2.4.0\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.4.0.zip\";s:5:\"2.4.1\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.4.1.zip\";s:5:\"2.5.0\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.5.0.zip\";s:5:\"2.5.1\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.5.1.zip\";s:6:\"2.5.10\";s:57:\"https://downloads.wordpress.org/plugin/akismet.2.5.10.zip\";s:5:\"2.5.2\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.5.2.zip\";s:5:\"2.5.3\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.5.3.zip\";s:5:\"2.5.4\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.5.4.zip\";s:5:\"2.5.5\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.5.5.zip\";s:5:\"2.5.6\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.5.6.zip\";s:5:\"2.5.7\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.5.7.zip\";s:5:\"2.5.8\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.5.8.zip\";s:5:\"2.5.9\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.5.9.zip\";s:5:\"2.6.0\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.6.0.zip\";s:5:\"2.6.1\";s:56:\"https://downloads.wordpress.org/plugin/akismet.2.6.1.zip\";s:5:\"3.0.0\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.0.0.zip\";s:9:\"3.0.0-RC1\";s:60:\"https://downloads.wordpress.org/plugin/akismet.3.0.0-RC1.zip\";s:5:\"3.0.1\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.0.1.zip\";s:5:\"3.0.2\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.0.2.zip\";s:5:\"3.0.3\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.0.3.zip\";s:5:\"3.0.4\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.0.4.zip\";s:5:\"3.0.5\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.0.5.zip\";s:3:\"3.1\";s:54:\"https://downloads.wordpress.org/plugin/akismet.3.1.zip\";s:5:\"3.1.1\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.1.1.zip\";s:6:\"3.1.10\";s:57:\"https://downloads.wordpress.org/plugin/akismet.3.1.10.zip\";s:6:\"3.1.11\";s:57:\"https://downloads.wordpress.org/plugin/akismet.3.1.11.zip\";s:5:\"3.1.2\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.1.2.zip\";s:5:\"3.1.3\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.1.3.zip\";s:5:\"3.1.4\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.1.4.zip\";s:5:\"3.1.5\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.1.5.zip\";s:5:\"3.1.6\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.1.6.zip\";s:5:\"3.1.7\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.1.7.zip\";s:5:\"3.1.8\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.1.8.zip\";s:5:\"3.1.9\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.1.9.zip\";s:3:\"3.2\";s:54:\"https://downloads.wordpress.org/plugin/akismet.3.2.zip\";s:3:\"3.3\";s:54:\"https://downloads.wordpress.org/plugin/akismet.3.3.zip\";s:5:\"3.3.1\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.3.1.zip\";s:5:\"3.3.2\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.3.2.zip\";s:5:\"3.3.3\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.3.3.zip\";s:5:\"3.3.4\";s:56:\"https://downloads.wordpress.org/plugin/akismet.3.3.4.zip\";s:3:\"4.0\";s:54:\"https://downloads.wordpress.org/plugin/akismet.4.0.zip\";s:5:\"4.0.1\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.0.1.zip\";s:5:\"4.0.2\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.0.2.zip\";s:5:\"4.0.3\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.0.3.zip\";s:5:\"4.0.4\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.0.4.zip\";s:5:\"4.0.5\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.0.5.zip\";s:5:\"4.0.6\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.0.6.zip\";s:5:\"4.0.7\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.0.7.zip\";s:5:\"4.0.8\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.0.8.zip\";s:3:\"4.1\";s:54:\"https://downloads.wordpress.org/plugin/akismet.4.1.zip\";s:5:\"4.1.1\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.1.1.zip\";s:5:\"4.1.2\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.1.2.zip\";s:5:\"4.1.3\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.1.3.zip\";s:5:\"4.1.4\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.1.4.zip\";s:5:\"4.1.5\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.1.5.zip\";s:5:\"4.1.6\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.1.6.zip\";s:5:\"4.1.7\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.1.7.zip\";s:5:\"4.1.8\";s:56:\"https://downloads.wordpress.org/plugin/akismet.4.1.8.zip\";s:5:\"trunk\";s:50:\"https://downloads.wordpress.org/plugin/akismet.zip\";}s:11:\"donate_link\";s:0:\"\";s:12:\"contributors\";a:0:{}}s:19:\"bbpress/bbpress.php\";a:25:{s:4:\"name\";s:7:\"bbPress\";s:4:\"slug\";s:7:\"bbpress\";s:7:\"version\";s:5:\"2.6.6\";s:6:\"author\";s:58:\"<a href=\"https://bbpress.org\">The bbPress Contributors</a>\";s:14:\"author_profile\";s:46:\"https://profiles.wordpress.org/johnjamesjacoby\";s:8:\"requires\";s:3:\"5.0\";s:6:\"tested\";s:5:\"5.6.1\";s:12:\"requires_php\";s:6:\"5.6.20\";s:13:\"compatibility\";a:0:{}s:6:\"rating\";i:80;s:7:\"ratings\";a:5:{i:5;i:190;i:4;i:40;i:3;i:24;i:2;i:20;i:1;i:44;}s:11:\"num_ratings\";i:318;s:15:\"support_threads\";i:1;s:24:\"support_threads_resolved\";i:0;s:10:\"downloaded\";i:7197859;s:12:\"last_updated\";s:21:\"2020-11-06 1:28am GMT\";s:5:\"added\";s:10:\"2010-01-13\";s:8:\"homepage\";s:19:\"https://bbpress.org\";s:8:\"sections\";a:4:{s:11:\"description\";s:291:\"<p>Are you looking for a timeless, elegant, and streamlined discussion board? bbPress is easy to integrate, easy to use, and is built to scale with your growing community.</p>\n<p>bbPress is intentionally simple yet infinitely powerful forum software, built by contributors to WordPress.</p>\n\";s:12:\"installation\";s:1835:\"<h4>From your WordPress dashboard</h4>\n<ol>\n<li>Visit &#8216;Plugins &gt; Add New&#8217;</li>\n<li>Search for &#8216;bbPress&#8217;</li>\n<li>Activate bbPress from your Plugins page. (You will be greeted with a Welcome page.)</li>\n</ol>\n<h4>From WordPress.org</h4>\n<ol>\n<li>Download bbPress.</li>\n<li>Upload the &#8216;bbpress&#8217; directory to your &#8216;/wp-content/plugins/&#8217; directory, using your favorite method (ftp, sftp, scp, etc&#8230;)</li>\n<li>Activate bbPress from your Plugins page. (You will be greeted with a Welcome page.)</li>\n</ol>\n<h4>Once Activated</h4>\n<ol>\n<li>Visit &#8216;Forums &gt; Add New&#8217; and create some forums. (You can always delete these later.)</li>\n<li>If you have pretty permalinks enabled, visit example.com/forums/, or if you do not have pretty permalinks enabled, visit example.com?post_type=forum</li>\n<li>Visit &#8216;Settings &gt; Forums&#8217; and configure the settings to best match the needs of your community.</li>\n<li>Visit &#8216;Tools &gt; Forums &gt; Import Forums&#8217; if you have an existing forum to convert to bbPress.</li>\n</ol>\n<h4>Once Configured</h4>\n<ul>\n<li>bbPress comes with a robust theme-compatibility API that does its best to make bbPress look and feel right with just-about any WordPress theme. You may need to adjust some styling on your own to make everything look pristine.</li>\n<li>You may want to customize the register/activation/sign-in/lost-password flows, to better suit your site. bbPress comes with a bevy of shortcodes to make this possible, listed here: https://codex.bbpress.org/shortcodes/</li>\n<li>bbPress also comes with built-in support for Akismet and BuddyPress, two very popular and very powerful WordPress plugins. If you&#8217;re using either, visit your Forum Settings page and ensure that integration appears correct.</li>\n</ul>\n\";s:9:\"changelog\";s:104:\"<p>Check out the <a href=\"https://codex.bbpress.org/releases/\" rel=\"nofollow ugc\">releases page</a></p>\n\";s:11:\"screenshots\";s:1543:\"<ol><li><a href=\"https://ps.w.org/bbpress/assets/screenshot-1.png?rev=872931\"><img src=\"https://ps.w.org/bbpress/assets/screenshot-1.png?rev=872931\" alt=\"Forums - Admin Interface\"></a><p>Forums - Admin Interface</p></li><li><a href=\"https://ps.w.org/bbpress/assets/screenshot-2.png?rev=872931\"><img src=\"https://ps.w.org/bbpress/assets/screenshot-2.png?rev=872931\" alt=\"Topics - Admin Interface\"></a><p>Topics - Admin Interface</p></li><li><a href=\"https://ps.w.org/bbpress/assets/screenshot-3.png?rev=872931\"><img src=\"https://ps.w.org/bbpress/assets/screenshot-3.png?rev=872931\" alt=\"Replies - Admin Interface\"></a><p>Replies - Admin Interface</p></li><li><a href=\"https://ps.w.org/bbpress/assets/screenshot-4.png?rev=872931\"><img src=\"https://ps.w.org/bbpress/assets/screenshot-4.png?rev=872931\" alt=\"Settings - Admin Interface\"></a><p>Settings - Admin Interface</p></li><li><a href=\"https://ps.w.org/bbpress/assets/screenshot-5.png?rev=872931\"><img src=\"https://ps.w.org/bbpress/assets/screenshot-5.png?rev=872931\" alt=\"Settings 2 - Admin Interface\"></a><p>Settings 2 - Admin Interface</p></li><li><a href=\"https://ps.w.org/bbpress/assets/screenshot-6.png?rev=872931\"><img src=\"https://ps.w.org/bbpress/assets/screenshot-6.png?rev=872931\" alt=\"Themes - Admin Interface\"></a><p>Themes - Admin Interface</p></li><li><a href=\"https://ps.w.org/bbpress/assets/screenshot-7.png?rev=872931\"><img src=\"https://ps.w.org/bbpress/assets/screenshot-7.png?rev=872931\" alt=\"Single Forum - Default Theme\"></a><p>Single Forum - Default Theme</p></li></ol>\";}s:13:\"download_link\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.6.6.zip\";s:11:\"screenshots\";a:7:{i:1;a:2:{s:3:\"src\";s:59:\"https://ps.w.org/bbpress/assets/screenshot-1.png?rev=872931\";s:7:\"caption\";s:24:\"Forums - Admin Interface\";}i:2;a:2:{s:3:\"src\";s:59:\"https://ps.w.org/bbpress/assets/screenshot-2.png?rev=872931\";s:7:\"caption\";s:24:\"Topics - Admin Interface\";}i:3;a:2:{s:3:\"src\";s:59:\"https://ps.w.org/bbpress/assets/screenshot-3.png?rev=872931\";s:7:\"caption\";s:25:\"Replies - Admin Interface\";}i:4;a:2:{s:3:\"src\";s:59:\"https://ps.w.org/bbpress/assets/screenshot-4.png?rev=872931\";s:7:\"caption\";s:26:\"Settings - Admin Interface\";}i:5;a:2:{s:3:\"src\";s:59:\"https://ps.w.org/bbpress/assets/screenshot-5.png?rev=872931\";s:7:\"caption\";s:28:\"Settings 2 - Admin Interface\";}i:6;a:2:{s:3:\"src\";s:59:\"https://ps.w.org/bbpress/assets/screenshot-6.png?rev=872931\";s:7:\"caption\";s:24:\"Themes - Admin Interface\";}i:7;a:2:{s:3:\"src\";s:59:\"https://ps.w.org/bbpress/assets/screenshot-7.png?rev=872931\";s:7:\"caption\";s:28:\"Single Forum - Default Theme\";}}s:4:\"tags\";a:4:{s:10:\"discussion\";s:10:\"discussion\";s:5:\"forum\";s:5:\"forum\";s:6:\"forums\";s:6:\"forums\";s:7:\"support\";s:7:\"support\";}s:8:\"versions\";a:62:{s:3:\"2.0\";s:54:\"https://downloads.wordpress.org/plugin/bbpress.2.0.zip\";s:10:\"2.0-beta-1\";s:61:\"https://downloads.wordpress.org/plugin/bbpress.2.0-beta-1.zip\";s:11:\"2.0-beta-2b\";s:62:\"https://downloads.wordpress.org/plugin/bbpress.2.0-beta-2b.zip\";s:10:\"2.0-beta-3\";s:61:\"https://downloads.wordpress.org/plugin/bbpress.2.0-beta-3.zip\";s:11:\"2.0-beta-3b\";s:62:\"https://downloads.wordpress.org/plugin/bbpress.2.0-beta-3b.zip\";s:8:\"2.0-rc-2\";s:59:\"https://downloads.wordpress.org/plugin/bbpress.2.0-rc-2.zip\";s:8:\"2.0-rc-3\";s:59:\"https://downloads.wordpress.org/plugin/bbpress.2.0-rc-3.zip\";s:8:\"2.0-rc-4\";s:59:\"https://downloads.wordpress.org/plugin/bbpress.2.0-rc-4.zip\";s:8:\"2.0-rc-5\";s:59:\"https://downloads.wordpress.org/plugin/bbpress.2.0-rc-5.zip\";s:5:\"2.0.1\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.0.1.zip\";s:5:\"2.0.2\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.0.2.zip\";s:5:\"2.0.3\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.0.3.zip\";s:3:\"2.1\";s:54:\"https://downloads.wordpress.org/plugin/bbpress.2.1.zip\";s:10:\"2.1-beta-1\";s:61:\"https://downloads.wordpress.org/plugin/bbpress.2.1-beta-1.zip\";s:7:\"2.1-rc1\";s:58:\"https://downloads.wordpress.org/plugin/bbpress.2.1-rc1.zip\";s:7:\"2.1-rc2\";s:58:\"https://downloads.wordpress.org/plugin/bbpress.2.1-rc2.zip\";s:7:\"2.1-rc3\";s:58:\"https://downloads.wordpress.org/plugin/bbpress.2.1-rc3.zip\";s:7:\"2.1-rc4\";s:58:\"https://downloads.wordpress.org/plugin/bbpress.2.1-rc4.zip\";s:5:\"2.1.1\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.1.1.zip\";s:5:\"2.1.2\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.1.2.zip\";s:5:\"2.1.3\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.1.3.zip\";s:3:\"2.2\";s:54:\"https://downloads.wordpress.org/plugin/bbpress.2.2.zip\";s:5:\"2.2.1\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.2.1.zip\";s:5:\"2.2.2\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.2.2.zip\";s:5:\"2.2.3\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.2.3.zip\";s:5:\"2.2.4\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.2.4.zip\";s:3:\"2.3\";s:54:\"https://downloads.wordpress.org/plugin/bbpress.2.3.zip\";s:9:\"2.3-beta1\";s:60:\"https://downloads.wordpress.org/plugin/bbpress.2.3-beta1.zip\";s:5:\"2.3.1\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.3.1.zip\";s:5:\"2.3.2\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.3.2.zip\";s:3:\"2.4\";s:54:\"https://downloads.wordpress.org/plugin/bbpress.2.4.zip\";s:5:\"2.4.1\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.4.1.zip\";s:3:\"2.5\";s:54:\"https://downloads.wordpress.org/plugin/bbpress.2.5.zip\";s:5:\"2.5.1\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.5.1.zip\";s:6:\"2.5.10\";s:57:\"https://downloads.wordpress.org/plugin/bbpress.2.5.10.zip\";s:6:\"2.5.11\";s:57:\"https://downloads.wordpress.org/plugin/bbpress.2.5.11.zip\";s:6:\"2.5.12\";s:57:\"https://downloads.wordpress.org/plugin/bbpress.2.5.12.zip\";s:6:\"2.5.13\";s:57:\"https://downloads.wordpress.org/plugin/bbpress.2.5.13.zip\";s:6:\"2.5.14\";s:57:\"https://downloads.wordpress.org/plugin/bbpress.2.5.14.zip\";s:5:\"2.5.2\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.5.2.zip\";s:5:\"2.5.3\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.5.3.zip\";s:5:\"2.5.4\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.5.4.zip\";s:5:\"2.5.5\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.5.5.zip\";s:5:\"2.5.6\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.5.6.zip\";s:5:\"2.5.7\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.5.7.zip\";s:5:\"2.5.8\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.5.8.zip\";s:5:\"2.5.9\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.5.9.zip\";s:10:\"2.6-beta-1\";s:61:\"https://downloads.wordpress.org/plugin/bbpress.2.6-beta-1.zip\";s:10:\"2.6-beta-2\";s:61:\"https://downloads.wordpress.org/plugin/bbpress.2.6-beta-2.zip\";s:8:\"2.6-rc-1\";s:59:\"https://downloads.wordpress.org/plugin/bbpress.2.6-rc-1.zip\";s:8:\"2.6-rc-3\";s:59:\"https://downloads.wordpress.org/plugin/bbpress.2.6-rc-3.zip\";s:8:\"2.6-rc-5\";s:59:\"https://downloads.wordpress.org/plugin/bbpress.2.6-rc-5.zip\";s:8:\"2.6-rc-6\";s:59:\"https://downloads.wordpress.org/plugin/bbpress.2.6-rc-6.zip\";s:8:\"2.6-rc-7\";s:59:\"https://downloads.wordpress.org/plugin/bbpress.2.6-rc-7.zip\";s:5:\"2.6.0\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.6.0.zip\";s:5:\"2.6.1\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.6.1.zip\";s:5:\"2.6.2\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.6.2.zip\";s:5:\"2.6.3\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.6.3.zip\";s:5:\"2.6.4\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.6.4.zip\";s:5:\"2.6.5\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.6.5.zip\";s:5:\"2.6.6\";s:56:\"https://downloads.wordpress.org/plugin/bbpress.2.6.6.zip\";s:5:\"trunk\";s:50:\"https://downloads.wordpress.org/plugin/bbpress.zip\";}s:11:\"donate_link\";s:0:\"\";s:12:\"contributors\";a:0:{}}s:33:\"classic-editor/classic-editor.php\";a:25:{s:4:\"name\";s:14:\"Classic Editor\";s:4:\"slug\";s:14:\"classic-editor\";s:7:\"version\";s:3:\"1.6\";s:6:\"author\";s:81:\"<a href=\"https://github.com/WordPress/classic-editor/\">WordPress Contributors</a>\";s:14:\"author_profile\";s:37:\"https://profiles.wordpress.org/azaozz\";s:8:\"requires\";s:3:\"4.9\";s:6:\"tested\";s:5:\"5.6.1\";s:12:\"requires_php\";s:5:\"5.2.4\";s:13:\"compatibility\";a:0:{}s:6:\"rating\";i:98;s:7:\"ratings\";a:5:{i:5;i:888;i:4;i:17;i:3;i:6;i:2;i:2;i:1;i:13;}s:11:\"num_ratings\";i:926;s:15:\"support_threads\";i:32;s:24:\"support_threads_resolved\";i:2;s:10:\"downloaded\";i:26162092;s:12:\"last_updated\";s:21:\"2020-12-13 3:18pm GMT\";s:5:\"added\";s:10:\"2017-10-24\";s:8:\"homepage\";s:45:\"https://wordpress.org/plugins/classic-editor/\";s:8:\"sections\";a:4:{s:11:\"description\";s:1191:\"<p>Classic Editor is an official plugin maintained by the WordPress team that restores the previous (&#8220;classic&#8221;) WordPress editor and the &#8220;Edit Post&#8221; screen. It makes it possible to use plugins that extend that screen, add old-style meta boxes, or otherwise depend on the previous editor.</p>\n<p>Classic Editor is an official WordPress plugin, and will be fully supported and maintained until at least 2022, or as long as is necessary.</p>\n<p>At a glance, this plugin adds the following:</p>\n<ul>\n<li>Administrators can select the default editor for all users.</li>\n<li>Administrators can allow users to change their default editor.</li>\n<li>When allowed, the users can choose which editor to use for each post.</li>\n<li>Each post opens in the last editor used regardless of who edited it last. This is important for maintaining a consistent experience when editing content.</li>\n</ul>\n<p>In addition, the Classic Editor plugin includes several filters that let other plugins control the settings, and the editor choice per post and per post type.</p>\n<p>By default, this plugin hides all functionality available in the new block editor (&#8220;Gutenberg&#8221;).</p>\n\";s:3:\"faq\";s:1014:\"\n<h4>\nDefault settings\n</h4>\n<p>\n<p>When activated this plugin will restore the previous (&#8220;classic&#8221;) WordPress editor and hide the new block editor (&#8220;Gutenberg&#8221;).<br />\nThese settings can be changed at the Settings =&gt; Writing screen.</p>\n</p>\n<h4>\nDefault settings for network installation\n</h4>\n<p>\n<p>There are two options:</p>\n<ul>\n<li>When network-activated this plugin will set the classic editor as default and prevent site administrators and users from changing editors.<br />\nThe settings can be changed and default network-wide editor can be selected on the Network Settings screen.</li>\n<li>When not network-activated each site administrator will be able to activate the plugin and choose options for their users.</li>\n</ul>\n</p>\n<h4>\nCannot find the &#8220;Switch to classic editor&#8221; link\n</h4>\n<p>\n<p>It is in the main block editor menu, see this <a href=\"https://ps.w.org/classic-editor/assets/screenshot-7.png?rev=2023480\" rel=\"nofollow ugc\">screenshot</a>.</p>\n</p>\n\n\";s:9:\"changelog\";s:4228:\"<h4>1.6</h4>\n<ul>\n<li>Updated for WordPress 5.5.</li>\n<li>Fixed minor issues with calling deprecated functions, needlessly registering uninstall hook, and capitalization of some strings.</li>\n</ul>\n<h4>1.5</h4>\n<ul>\n<li>Updated for WordPress 5.2 and Gutenberg 5.3.</li>\n<li>Enhanced and fixed the &#8220;open posts in the last editor used to edit them&#8221; logic.</li>\n<li>Fixed adding post state so it can easily be accessed from other plugins.</li>\n</ul>\n<h4>1.4</h4>\n<ul>\n<li>On network installations removed the restriction for only network activation.</li>\n<li>Added support for network administrators to choose the default network-wide editor.</li>\n<li>Fixed the settings link in the warning on network About screen.</li>\n<li>Properly added the &#8220;Switch to classic editor&#8221; menu item to the block editor menu.</li>\n</ul>\n<h4>1.3</h4>\n<ul>\n<li>Fixed removal of the &#8220;Try Gutenberg&#8221; dashboard widget.</li>\n<li>Fixed condition for displaying of the after upgrade notice on the &#8220;What&#8217;s New&#8221; screen. Shown when the classic editor is selected and users cannot switch editors.</li>\n</ul>\n<h4>1.2</h4>\n<ul>\n<li>Fixed switching editors from the Add New (post) screen before a draft post is saved.</li>\n<li>Fixed typo that was appending the edit URL to the <code>classic-editor</code> query var.</li>\n<li>Changed detecting of WordPress 5.0 to not use version check. Fixes a bug when testing 5.1-alpha.</li>\n<li>Changed the default value of the option to allow users to switch editors to false.</li>\n<li>Added disabling of the Gutenberg plugin and lowered the required WordPress version to 4.9.</li>\n<li>Added <code>classic_editor_network_default_settings</code> filter.</li>\n</ul>\n<h4>1.1</h4>\n<p>Fixed a bug where it may attempt to load the block editor for post types that do not support editor when users are allowed to switch editors.</p>\n<h4>1.0</h4>\n<ul>\n<li>Updated for WordPress 5.0.</li>\n<li>Changed all &#8220;Gutenberg&#8221; names/references to &#8220;block editor&#8221;.</li>\n<li>Refreshed the settings UI.</li>\n<li>Removed disabling of the Gutenberg plugin. This was added for testing in WordPress 4.9. Users who want to continue following the development of Gutenberg in WordPress 5.0 and beyond will not need another plugin to disable it.</li>\n<li>Added support for per-user settings of default editor.</li>\n<li>Added support for admins to set the default editor for the site.</li>\n<li>Added support for admins to allow users to change their default editor.</li>\n<li>Added support for network admins to prevent site admins from changing the default settings.</li>\n<li>Added support to store the last editor used for each post and open it next time. Enabled when users can choose default editor.</li>\n<li>Added &#8220;post editor state&#8221; in the listing of posts on the Posts screen. Shows the editor that will be opened for the post. Enabled when users can choose default editor.</li>\n<li>Added <code>classic_editor_enabled_editors_for_post</code> and <code>classic_editor_enabled_editors_for_post_type</code> filters. Can be used by other plugins to control or override the editor used for a particular post of post type.</li>\n<li>Added <code>classic_editor_plugin_settings</code> filter. Can be used by other plugins to override the settings and disable the settings UI.</li>\n</ul>\n<h4>0.5</h4>\n<ul>\n<li>Updated for Gutenberg 4.1 and WordPress 5.0-beta1.</li>\n<li>Removed some functionality that now exists in Gutenberg.</li>\n<li>Fixed redirecting back to the classic editor after looking at post revisions.</li>\n</ul>\n<h4>0.4</h4>\n<ul>\n<li>Fixed removing of the &#8220;Try Gutenberg&#8221; call-out when the Gutenberg plugin is not activated.</li>\n<li>Fixed to always show the settings and the settings link in the plugins list table.</li>\n<li>Updated the readme text.</li>\n</ul>\n<h4>0.3</h4>\n<ul>\n<li>Updated the option from a checkbox to couple of radio buttons, seems clearer. Thanks to @designsimply for the label text suggestions.</li>\n<li>Some general updates and cleanup.</li>\n</ul>\n<h4>0.2</h4>\n<ul>\n<li>Update for Gutenberg 1.9.</li>\n<li>Remove warning and automatic deactivation when Gutenberg is not active.</li>\n</ul>\n<h4>0.1</h4>\n<p>Initial release.</p>\n\";s:11:\"screenshots\";s:2591:\"<ol><li><a href=\"https://ps.w.org/classic-editor/assets/screenshot-1.png?rev=1998671\"><img src=\"https://ps.w.org/classic-editor/assets/screenshot-1.png?rev=1998671\" alt=\"Admin settings on the Settings -&gt; Writing screen.\"></a><p>Admin settings on the Settings -&gt; Writing screen.</p></li><li><a href=\"https://ps.w.org/classic-editor/assets/screenshot-2.png?rev=1998671\"><img src=\"https://ps.w.org/classic-editor/assets/screenshot-2.png?rev=1998671\" alt=\"User settings on the Profile screen. Visible when the users are allowed to switch editors.\"></a><p>User settings on the Profile screen. Visible when the users are allowed to switch editors.</p></li><li><a href=\"https://ps.w.org/classic-editor/assets/screenshot-3.png?rev=1998671\"><img src=\"https://ps.w.org/classic-editor/assets/screenshot-3.png?rev=1998671\" alt=\"&quot;Action links&quot; to choose alternative editor. Visible when the users are allowed to switch editors.\"></a><p>\"Action links\" to choose alternative editor. Visible when the users are allowed to switch editors.</p></li><li><a href=\"https://ps.w.org/classic-editor/assets/screenshot-4.png?rev=1998671\"><img src=\"https://ps.w.org/classic-editor/assets/screenshot-4.png?rev=1998671\" alt=\"Link to switch to the block editor while editing a post in the classic editor. Visible when the users are allowed to switch editors.\"></a><p>Link to switch to the block editor while editing a post in the classic editor. Visible when the users are allowed to switch editors.</p></li><li><a href=\"https://ps.w.org/classic-editor/assets/screenshot-5.png?rev=1998671\"><img src=\"https://ps.w.org/classic-editor/assets/screenshot-5.png?rev=1998671\" alt=\"Link to switch to the classic editor while editing a post in the block editor. Visible when the users are allowed to switch editors.\"></a><p>Link to switch to the classic editor while editing a post in the block editor. Visible when the users are allowed to switch editors.</p></li><li><a href=\"https://ps.w.org/classic-editor/assets/screenshot-6.png?rev=1998671\"><img src=\"https://ps.w.org/classic-editor/assets/screenshot-6.png?rev=1998671\" alt=\"Network settings to select the default editor for the network and allow site admins to change it.\"></a><p>Network settings to select the default editor for the network and allow site admins to change it.</p></li><li><a href=\"https://ps.w.org/classic-editor/assets/screenshot-7.png?rev=2023480\"><img src=\"https://ps.w.org/classic-editor/assets/screenshot-7.png?rev=2023480\" alt=\"The &quot;Switch to classic editor&quot; link.\"></a><p>The \"Switch to classic editor\" link.</p></li></ol>\";}s:13:\"download_link\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.1.6.zip\";s:11:\"screenshots\";a:7:{i:1;a:2:{s:3:\"src\";s:67:\"https://ps.w.org/classic-editor/assets/screenshot-1.png?rev=1998671\";s:7:\"caption\";s:52:\"Admin settings on the Settings -&gt; Writing screen.\";}i:2;a:2:{s:3:\"src\";s:67:\"https://ps.w.org/classic-editor/assets/screenshot-2.png?rev=1998671\";s:7:\"caption\";s:90:\"User settings on the Profile screen. Visible when the users are allowed to switch editors.\";}i:3;a:2:{s:3:\"src\";s:67:\"https://ps.w.org/classic-editor/assets/screenshot-3.png?rev=1998671\";s:7:\"caption\";s:98:\"\"Action links\" to choose alternative editor. Visible when the users are allowed to switch editors.\";}i:4;a:2:{s:3:\"src\";s:67:\"https://ps.w.org/classic-editor/assets/screenshot-4.png?rev=1998671\";s:7:\"caption\";s:132:\"Link to switch to the block editor while editing a post in the classic editor. Visible when the users are allowed to switch editors.\";}i:5;a:2:{s:3:\"src\";s:67:\"https://ps.w.org/classic-editor/assets/screenshot-5.png?rev=1998671\";s:7:\"caption\";s:132:\"Link to switch to the classic editor while editing a post in the block editor. Visible when the users are allowed to switch editors.\";}i:6;a:2:{s:3:\"src\";s:67:\"https://ps.w.org/classic-editor/assets/screenshot-6.png?rev=1998671\";s:7:\"caption\";s:97:\"Network settings to select the default editor for the network and allow site admins to change it.\";}i:7;a:2:{s:3:\"src\";s:67:\"https://ps.w.org/classic-editor/assets/screenshot-7.png?rev=2023480\";s:7:\"caption\";s:36:\"The \"Switch to classic editor\" link.\";}}s:4:\"tags\";a:5:{s:14:\"classic-editor\";s:14:\"classic editor\";s:7:\"disable\";s:7:\"disable\";s:17:\"disable-gutenberg\";s:17:\"disable gutenberg\";s:6:\"editor\";s:6:\"editor\";s:9:\"gutenberg\";s:9:\"gutenberg\";}s:8:\"versions\";a:13:{s:3:\"0.1\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.0.1.zip\";s:3:\"0.2\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.0.2.zip\";s:3:\"0.3\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.0.3.zip\";s:3:\"0.4\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.0.4.zip\";s:3:\"0.5\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.0.5.zip\";s:3:\"1.0\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.1.0.zip\";s:3:\"1.1\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.1.1.zip\";s:3:\"1.2\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.1.2.zip\";s:3:\"1.3\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.1.3.zip\";s:3:\"1.4\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.1.4.zip\";s:3:\"1.5\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.1.5.zip\";s:3:\"1.6\";s:61:\"https://downloads.wordpress.org/plugin/classic-editor.1.6.zip\";s:5:\"trunk\";s:57:\"https://downloads.wordpress.org/plugin/classic-editor.zip\";}s:11:\"donate_link\";s:0:\"\";s:12:\"contributors\";a:0:{}}s:19:\"jetpack/jetpack.php\";a:25:{s:4:\"name\";s:56:\"Jetpack &#8211; WP Security, Backup, Speed, &amp; Growth\";s:4:\"slug\";s:7:\"jetpack\";s:7:\"version\";s:3:\"9.4\";s:6:\"author\";s:44:\"<a href=\"https://jetpack.com\">Automattic</a>\";s:14:\"author_profile\";s:41:\"https://profiles.wordpress.org/automattic\";s:8:\"requires\";s:3:\"5.5\";s:6:\"tested\";s:5:\"5.6.1\";s:12:\"requires_php\";s:3:\"5.6\";s:13:\"compatibility\";a:0:{}s:6:\"rating\";i:78;s:7:\"ratings\";a:5:{i:5;i:979;i:4;i:135;i:3;i:80;i:2;i:74;i:1;i:301;}s:11:\"num_ratings\";i:1569;s:15:\"support_threads\";i:414;s:24:\"support_threads_resolved\";i:364;s:10:\"downloaded\";i:215333209;s:12:\"last_updated\";s:22:\"2021-02-02 11:38am GMT\";s:5:\"added\";s:10:\"2011-01-20\";s:8:\"homepage\";s:19:\"https://jetpack.com\";s:8:\"sections\";a:5:{s:11:\"description\";s:7338:\"<h4>The most popular WordPress plugin for just about everything.</h4>\n<p>Security, performance, marketing, and design tools — Jetpack is made by the WordPress experts to make WP sites safer and faster, and help you grow your traffic.</p>\n<h4>24/7 AUTO SITE SECURITY</h4>\n<p>We guard your site so you can run your site or business. Jetpack Security provides easy-to-use, comprehensive WordPress site security including auto real-time backups and easy restores, malware scanning, and spam protection. Essential features like brute force protection and downtime / uptime monitoring are free.</p>\n<ul>\n<li>Back up your site automatically in real time and restore to any point with one click. Unlimited storage for your backup. Great for eCommerce stores especially Woo.</li>\n<li>Easily duplicate, clone, or migrate your site whether you want to create a staging site or move to a new host.</li>\n<li>See every site change and who made it with the activity log, great for coordination, debug, maintenance, or troubleshooting.</li>\n<li>Automatic scan for malware and other code threats. One click fix to restore your site for malware.</li>\n<li>Block spam comments and form responses with anti spam features powered by Akismet.</li>\n<li>Brute force attack protection to protect your WordPress login page from attacks.</li>\n<li>Monitor your site uptime / downtime and get an instant alert of any change by email.</li>\n<li>Secure WordPress.com powered login used by millions of sites with optional 2FA (two factor authentication) for extra protection.</li>\n<li>Auto update individual plugins for easy site maintenance and management.</li>\n</ul>\n<h4>PEAK SPEED AND PERFORMANCE</h4>\n<p>Get blazing fast site speed with Jetpack, the premier WP plugin built to leverage the power of AMP, a tool that helps optimize your site on mobile devices. Jetpack’s free CDN (content delivery network) auto optimizes your images. Watch your page load times decrease — we’ll optimize your images and serve them from our own powerful global network, and speed up your site on mobile devices to reduce bandwidth usage and save money!</p>\n<ul>\n<li>Jetpack has partnered with Google AMP to create the best, highest performance all-in-one toolkit for WordPress. By using Jetpack and AMP together, you get all the features you need to build a beautiful, fast, modern website with no coding required.</li>\n<li>Image CDN for images and static files, like CSS and JavaScript, served from our servers, not yours, which saves you money and bandwidth.</li>\n<li>Lazy load images for a super fast experience, even on mobile. Jetpack’s lazy loading automatically delays the loading of media on your posts and pages until your visitors scroll down to where they appear on the page.</li>\n<li>Unlimited, high speed, ad free video hosting keeps the focus on your content, not on ads or recommendations that lead people off site.</li>\n<li>Custom site search is incredibly powerful and customizable. Helps your visitors instantly find the right content so they read and buy more. Works great with WooCommerce / eCommerce sites to help filter products so customers get what they want on your site faster.</li>\n<li>Recommended to use with WP Super Cache for ultimate WordPress site speed.</li>\n</ul>\n<h4>POWERFUL TOOLS FOR GROWTH</h4>\n<p>Create and customize your WordPress site, optimize it for visitors and revenue, and enjoy watching your stats tick up. Built it, share it, and watch it grow.</p>\n<ul>\n<li>Advanced site stats and analytics to help you understand your audience.</li>\n<li>Auto publish blog posts and products to social media by simply using our tools to connect to Facebook, Twitter, and Linkedin.</li>\n<li>Easily share Instagram posts on your pages and blog posts.</li>\n<li>Collect a payment or donation, sell a product, service, or membership with simple integrations with PayPal and Stripe.</li>\n<li>Grow traffic with SEO tools for Google, Bing, Twitter, Facebook, and WordPress.com. XML sitemap created automatically.</li>\n<li>Advertise on your site to generate revenue. The Jetpack ad network automatically does the work for you to find high-quality ads that are placed on your site.</li>\n<li>Manage Jetpack features from anywhere with the official WordPress mobile app, available for Apple iOS (iPhone or iPad) and Google Android.</li>\n<li>Looking for Customer Relationship Management? Check out the <a href=\"https://jetpackcrm.com\" rel=\"nofollow ugc\">Jetpack CRM plugin</a> which works alongside Jetpack to give you a simple and practical way to build relationships with your customers and leads.</li>\n</ul>\n<h4>EASY DESIGN TOOLS</h4>\n<p>Quickly customize your site to make it stand out — no coding needed.</p>\n<ul>\n<li>Themes — Simple themes to get started or pick a professional theme to make your site stand out.</li>\n<li>Related posts — Keep visitors on your site by automatically showing them related content they will be interested in.</li>\n<li>Gallery and Slideshow tools — Image galleries, carousel slider, and slideshows for WP sites and stores.</li>\n<li>Subscriptions — Make it easy for visitors to sign up to receive notifications of your latest posts and comments.</li>\n<li>Contact form — Easily build unlimited contact forms for free without any coding. Receive email notifications for each response. Integrate with mail solutions like Creative Mail to reach your customers and leads quickly. Connect to Jetpack Anti spam (powered by Akismet) to filter submissions.</li>\n<li>oEmbed Support — easily embed images, posts, and links from Facebook and Instagram.</li>\n</ul>\n<h4>INTEGRATIONS</h4>\n<p>Jetpack is updated monthly to ensure seamless integration with top WordPress plugins and other tech products.</p>\n<ul>\n<li>Built for WooCommerce: Jetpack and WooCommerce are both made by Automattic. Backup, Scan, Anti-spam, integrate perfectly for Woo / eComm stores</li>\n<li>Jetpack is fully compatible with v2.0 of the official AMP plugin for WordPress.</li>\n<li>Better understand your customers and marketing with Google Analytics (GA) integration</li>\n<li>Social media platforms: Instagram, Facebook, Twitter, LinkedIn</li>\n<li>Simple Blocks to customize your site: Pinterest, Whatsapp, Podcast player, GIFs, maps, tiled gallery, slideshow</li>\n<li>Payment processors: easily collect payments or donations and sell products through Stripe and PayPal</li>\n<li>Site speed and performance plugins: Works great with WP Super Cache and  Cloudflare.</li>\n<li>Contact form: Anti-spam (Powered by Akismet) blocks spam comments for Jetpack forms, Contact Form 7, Ninja Forms, Gravity Forms, Formidable Forms, and more.</li>\n<li>Other tech integrations: Instagram, Creative Mail, Mailchimp, Calendly, Whatsapp, Pinterest, Revue, and more.</li>\n</ul>\n<h4>EXPERT SUPPORT</h4>\n<p>We have a global team of Happiness Engineers ready to provide incredible support. Ask your questions in the support forum or <a href=\"https://jetpack.com/contact-support\" rel=\"nofollow ugc\">contact us directly</a>.</p>\n<h4>GET STARTED</h4>\n<p>Installation is free, quick, and easy. <a href=\"https://jetpack.com/install?from=wporg\" rel=\"nofollow ugc\">Set up Jetpack</a> in minutes. Take advantage of more robust features like site security and design and growth tools by <a href=\"http://jetpack.com/pricing\" rel=\"nofollow ugc\">upgrading to a paid plan</a>.</p>\n\";s:12:\"installation\";s:494:\"<h4>Automated Installation</h4>\n<p>Installation is free, quick, and easy. <a href=\"https://jetpack.com/install?from=wporg\" rel=\"nofollow ugc\">Set up Jetpack</a> in minutes.</p>\n<h4>Manual Alternatives</h4>\n<p>Alternatively, install Jetpack via the plugin directory, or upload the files manually to your server and follow the on-screen instructions. If you need additional help read <a href=\"https://jetpack.com/support/installing-jetpack/\" rel=\"nofollow ugc\">our detailed instructions</a>.</p>\n\";s:3:\"faq\";s:15780:\"\n<dt id=\'is%20jetpack%20free%3F\'>\nIs Jetpack free?\n</h4>\n<p>\n<p>Yes! Jetpack&#8217;s core features are and always will be free.</p>\n<p>These include: site stats, a high-speed CDN for images, related posts, downtime monitoring, brute force attack protection, automated sharing to social networks, sidebar customization, and much more.</p>\n</p>\n<dt id=\'should%20i%20purchase%20a%20paid%20plan%3F\'>\nShould I purchase a paid plan?\n</h4>\n<p>\n<p>It depends on your site and what kind of protection, performance, and design you need. If you make money from your site, the answer is often “yes.” For context, Jetpack&#8217;s paid services include real-time backups, security scanning, premium themes, spam filtering, video hosting, site monetization, SEO (search engine optimization) tools, search, priority support, and more.</p>\n<p>To learn more about the essential security and WordPress services we provide and see how we can improve your site, visit <a href=\"https://jetpack.com/pricing?from=wporg\" rel=\"nofollow ugc\">our plans page</a>.</p>\n</p>\n<dt id=\'why%20do%20i%20need%20a%20wordpress.com%20account%3F\'>\nWhy do I need a WordPress.com account?\n</h4>\n<p>\n<p>Since Jetpack and its services are provided and hosted by WordPress.com, a WordPress.com account is required for Jetpack to function.</p>\n</p>\n<dt id=\'i%20already%20have%20a%20wordpress%20account%2C%20but%20jetpack%20isn%27t%20working.%20what%27s%20going%20on%3F\'>\nI already have a WordPress account, but Jetpack isn&#8217;t working. What&#8217;s going on?\n</h4>\n<p>\n<p>A WordPress.com account is different from the account you use to log into your self-hosted WordPress. If you can log into WordPress.com, then you already have a WordPress.com account. If you can’t, you can easily create one<a href=\"https://jetpack.com/install?from=wporg\" rel=\"nofollow ugc\">during installation</a>.</p>\n</p>\n<dt id=\'how%20do%20i%20view%20my%20stats%3F\'>\nHow do I view my stats?\n</h4>\n<p>\n<p>Once you’ve installed Jetpack, your stats will be available on your Jetpack dashboard and through the <a href=\"https://apps.wordpress.com/mobile/\" rel=\"nofollow ugc\">official WordPress mobile app</a>.</p>\n</p>\n<dt id=\'how%20do%20i%20contribute%20to%20jetpack%3F\'>\nHow do I contribute to Jetpack?\n</h4>\n<p>\n<p>There are opportunities for developers at all levels to contribute. <a href=\"https://jetpack.com/contribute\" rel=\"nofollow ugc\">Learn more about contributing to Jetpack</a> or consider <a href=\"https://jetpack.com/beta\" rel=\"nofollow ugc\">joining our beta program</a>.</p>\n</p>\n<dt id=\'what%20else%20does%20jetpack%20include%3F\'>\nWhat else does Jetpack include?\n</h4>\n<p>\n<p>Jetpack is the ultimate toolkit for WP for both the classic editor and the block editor, giving you everything you need for a professional site. It includes the following features:</p>\n<ul>\n<li>Activity log — Monitor all site changes for debug, troubleshooting, or maintenance</li>\n<li>Ads — Earn income by displaying high quality ads on your site.</li>\n<li>Beautiful Math — Use the LaTeX markup language for writing complex mathematical equations, formulas, and more.</li>\n<li>Carousel slider — Display a gorgeous full-screen photo browsing experience with comments and EXIF metadata.</li>\n<li>CDN — Helps your pages load faster by allowing Jetpack to optimize your images and serve your images and static files (like CSS and JavaScript) from our global network of servers.</li>\n<li>Comments — Replace your default comment form with an improved system with integrated social media login options.</li>\n<li>Comment Likes — Allows readers to like other comments to show their agreement, approval, or appreciation.</li>\n<li>Contact Form — Offer your readers the ability to get in touch, without giving out your personal email address.</li>\n<li>Custom CSS — Customize the appearance of your theme without creating a child theme or worrying about updates overwriting your customizations.</li>\n<li>Custom Content Types — Adds custom post types (CPTs) to your site.</li>\n<li>Downtime Monitor — Alerts you via electronic mail if your site goes down to ensure you keep uptime.</li>\n<li>Enhanced Distribution — Increase your reach by allowing your content to be included in the WordPress.com “firehose” of public blog content.</li>\n<li>Extra Sidebar Widgets — Extra widgets you can add to your blog, including RSS Links, Twitter Timelines, and Facebook Like Boxes.</li>\n<li>Gravatar Hovercards — Make your Gravatar profile visible to those viewing your blog.</li>\n<li>Google Analytics (GA) — Track your WordPress site statistics thanks to Google Analytics.</li>\n<li>Infinite Scroll — Pulls the next posts automatically into view when the reader approaches the bottom of the page.</li>\n<li>JSON API — Authorizes applications and services to securely connect to your blog, and allows them to use your content or offer you new functionality.</li>\n<li>Lazy Load Images — Makes pages load faster by only lazy loading images that are on the screen, and loads other images as the user scrolls</li>\n<li>Likes — Allows readers to show their appreciation for your posts with a single click.</li>\n<li>Markdown — Allows you to compose posts and comments with links, lists, and other styles using regular characters and punctuation marks. Markdown is used by writers and bloggers who want a quick and easy way to write rich text without having to take their hands off the keyboard.</li>\n<li>Notifications — Receive notifications for new comments and Likes in your admin bar and on your mobile device.</li>\n<li>oEmbed Support — easily embed images, posts, and links from Facebook and Instagram.</li>\n<li>Plugin Management — Allows easy site maintenance by choosing which plugins update automatically.</li>\n<li>Post by Email — Publish posts using any mail client.</li>\n<li>Protect — Protect your site from traditional and distributed brute force login attacks.</li>\n<li>Publicize — Share new posts on social media networks automatically, or schedule future shares with custom messages.</li>\n<li>Related Posts  — Show contextual posts your visitors might be interested in reading after they’re done with their current post.</li>\n<li>Secure Auth —  Secure WordPress.com powered login used by millions of sites with optional 2FA (two factor authentication) for extra protection.</li>\n<li>Security Scanning — Anti-virus, malware, and threat detection for your WordPress site with automated resolution.</li>\n<li>Search — A powerful replacement for WordPress’ built-in search, powered by Elasticsearch in the WordPress.com cloud</li>\n<li>SEO Tools — Optimize your site for search engines by taking advantage of our SEO tools.</li>\n<li>Sharing — Adds sharing buttons to your blog posts so readers can easily share your content.</li>\n<li>Shortcode Embeds — Embed videos from YouTube, tweets from Twitter, and other media across the web.</li>\n<li>Site Backup — Automatically back up your entire site. Duplicate, clone, migrate, and easily restore.</li>\n<li>Site Stats — View site visits by date, as well as most popular Pages and Posts.</li>\n<li>Site Verification — Verify your site for use with Google, Bing, and Pinterest and their tools.</li>\n<li>Sitemap — Generate a list of pages to be indexed by search engines like Google or Bing.</li>\n<li>Spam Filtering — Automatically filter out spam comments, product reviews, or contact form submissions.</li>\n<li>Subscriptions — Allow visitors to receive notifications of your latest posts or comments.</li>\n<li>Tiled Galleries — Display your image galleries in three different styles: a rectangular mosaic, a square mosaic, and a circular grid.</li>\n<li>Video Hosting  — Upload videos for fast, reliable hosting on WordPress.com.</li>\n<li>WP.me Shortlinks — Generate short and simple links to your content using the wp.me domain.</li>\n<li>Widget Visibility — Configure widgets to appear only on specific pages.</li>\n<li>WordPress.com Toolbar — The WordPress.com Toolbar feature replaces the default admin bar and offers quick links to the Reader, all your sites, your WordPress.com profile, and notifications.</li>\n</ul>\n</p>\n<dt id=\'what%20blocks%20does%20jetpack%20include%3F\'>\nWhat Blocks does Jetpack include?\n</h4>\n<p>\n<p>Blocks are the individual sections that make up a page. There are many block types for you to use. Each block can be edited or moved independently of other blocks. The following is a list of all blocks currently available in Jetpack.</p>\n<ul>\n<li>Ad Block &#8211; The Ad block allows you to insert a Jetpack Ad unit anywhere within the content of any post or page.</li>\n<li>Business Hours Block &#8211; The Business Hours block allows you to display your business’s opening hours on your site.</li>\n<li>Calendly Block &#8211; Jetpack&#8217;s Calendly block allows your visitors to schedule one-on-one appointments, group events, and team meetings directly from your website.</li>\n<li>Contact Info Block &#8211; The Contact Info block lets you add your contact information (email address, physical address, phone number) to any post or page.</li>\n<li>Donations Block &#8211; The Donations block lets you add a payment button to any post or page for a donation, tips, and other contributions, using Stripe as the payment gateway.</li>\n<li>Eventbrite Block &#8211; With the Eventbrite block you can embed events on posts or pages.</li>\n<li>Form Block &#8211; The Form block lets you add a form to your post or page.</li>\n<li>GIF Block &#8211; The GIF block allows you to easily search for and embed an animated GIF image from Giphy directly into a post or page on your WordPress site.</li>\n<li>Google Calendar Block &#8211; The Google Calendar block allows you to easily embed a Google Calendar into your post or page</li>\n<li>Image Compare Block &#8211; The Image Compare Block allows you to display and compare the differences between two images side by side (or above and below) thanks to a slider.</li>\n<li>Latest Instagram Posts Block &#8211; The Latest Instagram Posts Block lets you display your most recent images from Instagram on your site. The block update automatically updates when you post new images to Instagram.</li>\n<li>Mailchimp Block &#8211; The Mailchimp block allows visitors to join your Mailchimp list.</li>\n<li>Map Block &#8211; The Map Block allows you to add a map to any post or page on your site.</li>\n<li>Markdown Block &#8211; With the Markdown block you can create formatted content using only regular characters and some punctuation marks.</li>\n<li>OpenTable Block &#8211; With the OpenTable block, you can add a reservation form on posts or pages.</li>\n<li>Pay with PayPal Block &#8211; Pay with PayPal lets you add a payment button to any post or page, and immediately start taking PayPal payments for physical products, digital goods, or a donation.</li>\n<li>Payments Block &#8211; The Payments Block lets you add a payment button using Stripe as the payment gateway. It works for one-time and recurring payments.</li>\n<li>Pinterest Block &#8211; The Pinterest block is the easiest way to embed Pinterest content to your site: it allows you to embed boards, profiles, and pins.</li>\n<li>Podcast Player Block &#8211; Jetpack&#8217;s Podcast Player block allows you to easily show your visitors a listing of recent episodes from a podcast and play them on your website.</li>\n<li>Related Posts Block &#8211; The Related Posts feature scans all of your posts&#8217; contents, analyzes it, and uses that to display contextual posts your visitors might be interested in reading after they&#8217;re finished with the current post.</li>\n<li>Repeat Visitor Block &#8211; The Repeat Visitor block enables the author to control the visibility of its nested block(s) depending on how many times a visitor has previously visited the page.</li>\n<li>Revue Block &#8211; The Revue block creates a simple signup form for readers to opt-in to receive your newsletter.</li>\n<li>Slideshow Block &#8211; The Slideshow block lets you insert an image slideshow into a post or page.?</li>\n<li>Star Rating Block &#8211; The Ratings block allows any site author to add reviews to the site.</li>\n<li>Subscription Form Block &#8211; The Subscription Form Block allows you to insert a subscription form within the content area of any post or page, enabling your readers to get notifications when you publish new posts.</li>\n<li>Tiled Gallery Block &#8211; With Tiled Galleries you can display your image galleries in four styles: tiled mosaic, circular grid, square tiles, and tiled columns.</li>\n<li>Video Block &#8211; The Video block enhances the existing WordPress Video block and allows you to upload videos from your computer to be hosted on WordPress.com, rather than on your host’s servers.</li>\n<li>WhatsApp Button Block &#8211; The WhatsAPP Button block will allow your customers to send them a message to enquire about their product or services, or ask for support. Clicking on the button will open WhatsApp and pre-fill the phone number and initial message.</li>\n</ul>\n<p>Jetpack has also created extensions for some WordPress core blocks:</p>\n<ul>\n<li>Unrolling Tweet Threads – This extension to the Twitter block allows you to import an entire Tweet thread into the editor as native blocks.</li>\n<li>Social Previews – This extension of the Block Editor allows you to preview what your post / page will look like on search engines and social media.</li>\n</ul>\n</p>\n<dt id=\'do%20i%20need%20an%20ssl%20certificate%3F\'>\nDo I need an SSL certificate?\n</h4>\n<p>\n<p>You don’t need an SSL Certificate to run Jetpack on your WordPress website. However, it’s recommended to integrate them both into your overall security strategy. An SSL certificate (Secure Sockets Layer certificate) creates a secure connection between your website and your site visitors’ browsers. It encrypts any data shared on your site — like addresses, emails, phone numbers, and credit card information — and protects that data from hackers.</p>\n<p>If you don’t have an SSL certificate, your site will show a “not secure” warning on users’ browsers, which can reduce your legitimacy in their eyes. SSL certificates also have a positive impact on search engine rankings.</p>\n<p>The process of setting up an SSL certificate will depend on your hosting provider. Some hosts include free certificates, while others charge annually.</p>\n</p>\n<dt id=\'how%20does%20jetpack%20work%20with%20wp%20super%20cache%3F\'>\nHow does Jetpack work with WP Super Cache?\n</h4>\n<p>\n<p>WP Super Cache works by caching your WordPress pages as static HTML pages so that page requests, for an already cached page, do not need to be processed by the WordPress PHP scripts. Typically, most visitors of your site will view cached versions of the WordPress pages, so your server will have more processing power to serve an increased number of users.</p>\n<p>Jetpack has an image CDN that works by caching and serving your WordPress images globally from its own servers. These plugins are both maintained by Automattic and work together to give you ultimate site speed.</p>\n</p>\n<dt id=\'what%20version%20of%20php%20do%20i%20need%3F\'>\nWhat version of PHP do I need?\n</h4>\n<p>\n<p>Sites must be built on PHP 5.6 or greater, but Jetpack always supports the latest version of PHP.</p>\n</p>\n<dt id=\'can%20jetpack%20help%20my%20site%20comply%20with%20gdpr%3F\'>\nCan Jetpack help my site comply with GDPR?\n</h4>\n<p>\n<p>Our Cookie and Consent Banner can help you comply with GDPR. The European Union’s ePrivacy Directive (often referred to as the ‘cookie law’) and General Data Protection Regulation (GDPR) place requirements on website owners and operators to provide information about, and gain consent for their use of cookies.</p>\n</p>\n\n\";s:9:\"changelog\";s:2788:\"<h4>9.4</h4>\n<ul>\n<li>Release date: February 2, 2021</li>\n<li>Release post: https://wp.me/p1moTy-tOv</li>\n</ul>\n<p><strong>Enhancements</strong></p>\n<ul>\n<li>Dashboard: add new Recommendations page to help you get started with recommended features of Jetpack.</li>\n<li>Dashboard: change the development notice link to an external link.</li>\n<li>Podcast Player Block: add skip back/forward buttons.</li>\n<li>Podcast Player Block: improve RSS feed detection.</li>\n<li>Sharing: remove jQuery dependency to improve performance of the sharing buttons.</li>\n<li>Sharing: improve performance of the Email Sharing button by lazy-loading the Google reCAPTCHA when necessary.</li>\n<li>Social Menu: add Patreon icon.</li>\n<li>Synchronization with WordPress.com: improve the validation of field names when calculating checksums on tables.</li>\n<li>Synchronization Performance: reduce concurrency of requests by implementation of Retry-After for concurrent requests.</li>\n<li>Widgets: add Patreon icon to Social Icons Widget.</li>\n<li>WordPress.com REST API: add new Cloudflare Analytics field option.</li>\n</ul>\n<p><strong>Improved compatibility</strong></p>\n<ul>\n<li>Form Block: avoid display issues when submitting a form within an AMP view.</li>\n<li>Instant Search: improve support for older browsers such as Internet Explorer 11.</li>\n<li>Secure Sign On: support custom login page plugins such as WPS Hide Login.</li>\n<li>Tiled Gallery Block: add additional CSS classes to improve compatibility with the Core Gallery block.</li>\n</ul>\n<p><strong>Bug fixes</strong></p>\n<ul>\n<li>Autoloader: resolve inconsistencies when including a cache supporting autoloader from one without cache support.</li>\n<li>Contact Form: prevent post status transition actions from firing twice when the post status is changed.</li>\n<li>Crowdsignal: avoid issues when using a Crowdsignal shortcode in the block editor.</li>\n<li>Jetpack Video Block: avoid block validation errors when editing existing content.</li>\n<li>Jetpack Video Block: add missing alignment classes.</li>\n<li>Publicize: allow clearing Publicize custom message if a post title has been set.</li>\n<li>Stats: update dashboard widget to respect new dashboard widget markup.</li>\n<li>Subcriptions Block: avoid errors when displayed within a Disabled context, such as a block or pattern preview.</li>\n<li>Synchronization with WordPress.com: avoid PHP warnings.</li>\n<li>Synchronization with WordPress.com: fix potential PHP notices when making XMLRPC requests.</li>\n<li>WordPress.com REST API: fix PHP notice when fetching user connection data without a connection owner.</li>\n</ul>\n<p><a href=\"https://raw.githubusercontent.com/Automattic/jetpack/master/projects/plugins/jetpack/changelog.txt\" rel=\"nofollow ugc\">See the previous changelogs here</a></p>\n\";s:11:\"screenshots\";s:1499:\"<ol><li><a href=\"https://ps.w.org/jetpack/assets/screenshot-1.png?rev=2394525\"><img src=\"https://ps.w.org/jetpack/assets/screenshot-1.png?rev=2394525\" alt=\"Jetpack Security provides easy-to-use, comprehensive WordPress site security including backups, malware scanning, and spam protection.\"></a><p>Jetpack Security provides easy-to-use, comprehensive WordPress site security including backups, malware scanning, and spam protection.</p></li><li><a href=\"https://ps.w.org/jetpack/assets/screenshot-2.png?rev=2394525\"><img src=\"https://ps.w.org/jetpack/assets/screenshot-2.png?rev=2394525\" alt=\"Save every change with real-time backups and get back online quickly with one-click restores.\"></a><p>Save every change with real-time backups and get back online quickly with one-click restores.</p></li><li><a href=\"https://ps.w.org/jetpack/assets/screenshot-3.png?rev=2394525\"><img src=\"https://ps.w.org/jetpack/assets/screenshot-3.png?rev=2394525\" alt=\"Automated malware scanning and one-click fixes keep your site one step ahead of security threats.\"></a><p>Automated malware scanning and one-click fixes keep your site one step ahead of security threats.</p></li><li><a href=\"https://ps.w.org/jetpack/assets/screenshot-4.png?rev=2079476\"><img src=\"https://ps.w.org/jetpack/assets/screenshot-4.png?rev=2079476\" alt=\"Promote your newest posts, pages, and products across your social media channels.\"></a><p>Promote your newest posts, pages, and products across your social media channels.</p></li></ol>\";}s:13:\"download_link\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.9.4.zip\";s:11:\"screenshots\";a:4:{i:1;a:2:{s:3:\"src\";s:60:\"https://ps.w.org/jetpack/assets/screenshot-1.png?rev=2394525\";s:7:\"caption\";s:134:\"Jetpack Security provides easy-to-use, comprehensive WordPress site security including backups, malware scanning, and spam protection.\";}i:2;a:2:{s:3:\"src\";s:60:\"https://ps.w.org/jetpack/assets/screenshot-2.png?rev=2394525\";s:7:\"caption\";s:93:\"Save every change with real-time backups and get back online quickly with one-click restores.\";}i:3;a:2:{s:3:\"src\";s:60:\"https://ps.w.org/jetpack/assets/screenshot-3.png?rev=2394525\";s:7:\"caption\";s:97:\"Automated malware scanning and one-click fixes keep your site one step ahead of security threats.\";}i:4;a:2:{s:3:\"src\";s:60:\"https://ps.w.org/jetpack/assets/screenshot-4.png?rev=2079476\";s:7:\"caption\";s:81:\"Promote your newest posts, pages, and products across your social media channels.\";}}s:4:\"tags\";a:5:{s:3:\"amp\";s:3:\"amp\";s:6:\"backup\";s:6:\"backup\";s:6:\"social\";s:6:\"social\";s:11:\"woocommerce\";s:11:\"woocommerce\";s:2:\"wp\";s:2:\"wp\";}s:8:\"versions\";a:161:{s:5:\"2.0.7\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.2.0.7.zip\";s:5:\"2.1.5\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.2.1.5.zip\";s:5:\"2.2.8\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.2.2.8.zip\";s:5:\"2.3.8\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.2.3.8.zip\";s:5:\"2.4.5\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.2.4.5.zip\";s:5:\"2.5.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.2.5.3.zip\";s:5:\"2.6.4\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.2.6.4.zip\";s:5:\"2.7.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.2.7.3.zip\";s:5:\"2.8.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.2.8.3.zip\";s:5:\"2.9.4\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.2.9.4.zip\";s:5:\"3.0.4\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.3.0.4.zip\";s:5:\"3.1.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.3.1.3.zip\";s:5:\"3.2.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.3.2.3.zip\";s:5:\"3.3.4\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.3.3.4.zip\";s:5:\"3.4.4\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.3.4.4.zip\";s:5:\"3.5.4\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.3.5.4.zip\";s:5:\"3.6.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.3.6.2.zip\";s:5:\"3.7.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.3.7.3.zip\";s:5:\"3.8.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.3.8.3.zip\";s:5:\"3.9.7\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.3.9.7.zip\";s:5:\"4.0.4\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.4.0.4.zip\";s:5:\"4.1.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.4.1.1.zip\";s:3:\"4.2\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.4.2.zip\";s:5:\"4.2.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.4.2.1.zip\";s:5:\"4.2.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.4.2.2.zip\";s:3:\"4.3\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.4.3.zip\";s:5:\"4.3.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.4.3.1.zip\";s:5:\"4.3.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.4.3.2.zip\";s:3:\"4.4\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.4.4.zip\";s:5:\"4.4.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.4.4.1.zip\";s:5:\"4.4.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.4.4.2.zip\";s:3:\"4.5\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.4.5.zip\";s:3:\"4.6\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.4.6.zip\";s:3:\"4.7\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.4.7.zip\";s:5:\"4.7.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.4.7.1.zip\";s:3:\"4.8\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.4.8.zip\";s:5:\"4.8.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.4.8.1.zip\";s:5:\"4.8.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.4.8.2.zip\";s:3:\"4.9\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.4.9.zip\";s:3:\"5.0\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.5.0.zip\";s:3:\"5.1\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.5.1.zip\";s:5:\"5.1.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.1.1.zip\";s:3:\"5.2\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.5.2.zip\";s:5:\"5.2.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.2.1.zip\";s:5:\"5.2.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.2.2.zip\";s:3:\"5.3\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.5.3.zip\";s:5:\"5.3.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.3.1.zip\";s:3:\"5.4\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.5.4.zip\";s:5:\"5.4.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.4.1.zip\";s:3:\"5.5\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.5.5.zip\";s:5:\"5.5.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.5.1.zip\";s:5:\"5.5.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.5.2.zip\";s:3:\"5.6\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.5.6.zip\";s:5:\"5.6.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.6.1.zip\";s:5:\"5.6.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.6.2.zip\";s:3:\"5.7\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.5.7.zip\";s:5:\"5.7.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.7.1.zip\";s:5:\"5.7.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.7.2.zip\";s:3:\"5.8\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.5.8.zip\";s:5:\"5.8.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.8.1.zip\";s:3:\"5.9\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.5.9.zip\";s:5:\"5.9.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.5.9.1.zip\";s:3:\"6.0\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.6.0.zip\";s:5:\"6.0.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.0.1.zip\";s:3:\"6.1\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.6.1.zip\";s:5:\"6.1.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.1.1.zip\";s:5:\"6.1.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.1.2.zip\";s:3:\"6.2\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.6.2.zip\";s:5:\"6.2.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.2.1.zip\";s:5:\"6.2.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.2.2.zip\";s:3:\"6.3\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.6.3.zip\";s:5:\"6.3.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.3.1.zip\";s:5:\"6.3.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.3.2.zip\";s:5:\"6.3.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.3.3.zip\";s:5:\"6.3.4\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.3.4.zip\";s:3:\"6.4\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.6.4.zip\";s:5:\"6.4.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.4.1.zip\";s:5:\"6.4.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.4.2.zip\";s:5:\"6.4.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.4.3.zip\";s:3:\"6.5\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.6.5.zip\";s:5:\"6.5.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.5.1.zip\";s:3:\"6.6\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.6.6.zip\";s:5:\"6.6.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.6.1.zip\";s:5:\"6.6.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.6.2.zip\";s:3:\"6.7\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.6.7.zip\";s:5:\"6.7.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.7.1.zip\";s:3:\"6.8\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.6.8.zip\";s:5:\"6.8.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.8.1.zip\";s:5:\"6.8.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.8.2.zip\";s:3:\"6.9\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.6.9.zip\";s:5:\"6.9.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.6.9.1.zip\";s:3:\"7.0\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.7.0.zip\";s:5:\"7.0.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.0.1.zip\";s:5:\"7.0.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.0.2.zip\";s:3:\"7.1\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.7.1.zip\";s:5:\"7.1.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.1.1.zip\";s:5:\"7.1.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.1.2.zip\";s:3:\"7.2\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.7.2.zip\";s:5:\"7.2.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.2.1.zip\";s:7:\"7.2.1.1\";s:58:\"https://downloads.wordpress.org/plugin/jetpack.7.2.1.1.zip\";s:5:\"7.2.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.2.2.zip\";s:3:\"7.3\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.7.3.zip\";s:7:\"7.3.0.1\";s:58:\"https://downloads.wordpress.org/plugin/jetpack.7.3.0.1.zip\";s:5:\"7.3.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.3.1.zip\";s:7:\"7.3.1.1\";s:58:\"https://downloads.wordpress.org/plugin/jetpack.7.3.1.1.zip\";s:5:\"7.3.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.3.2.zip\";s:3:\"7.4\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.7.4.zip\";s:5:\"7.4.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.4.1.zip\";s:5:\"7.4.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.4.2.zip\";s:3:\"7.5\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.7.5.zip\";s:7:\"7.5.0.1\";s:58:\"https://downloads.wordpress.org/plugin/jetpack.7.5.0.1.zip\";s:5:\"7.5.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.5.1.zip\";s:5:\"7.5.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.5.2.zip\";s:5:\"7.5.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.5.3.zip\";s:5:\"7.5.4\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.5.4.zip\";s:3:\"7.6\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.7.6.zip\";s:5:\"7.6.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.6.1.zip\";s:3:\"7.7\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.7.7.zip\";s:5:\"7.7.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.7.1.zip\";s:5:\"7.7.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.7.2.zip\";s:5:\"7.7.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.7.3.zip\";s:3:\"7.8\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.7.8.zip\";s:5:\"7.8.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.8.1.zip\";s:3:\"7.9\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.7.9.zip\";s:5:\"7.9.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.7.9.1.zip\";s:3:\"8.0\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.8.0.zip\";s:3:\"8.1\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.8.1.zip\";s:5:\"8.1.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.8.1.1.zip\";s:3:\"8.2\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.8.2.zip\";s:7:\"8.2.0.1\";s:58:\"https://downloads.wordpress.org/plugin/jetpack.8.2.0.1.zip\";s:5:\"8.2.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.8.2.1.zip\";s:5:\"8.2.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.8.2.2.zip\";s:5:\"8.2.3\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.8.2.3.zip\";s:3:\"8.3\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.8.3.zip\";s:3:\"8.4\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.8.4.zip\";s:5:\"8.4.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.8.4.1.zip\";s:5:\"8.4.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.8.4.2.zip\";s:3:\"8.5\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.8.5.zip\";s:3:\"8.6\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.8.6.zip\";s:5:\"8.6.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.8.6.1.zip\";s:3:\"8.7\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.8.7.zip\";s:7:\"8.7.0.1\";s:58:\"https://downloads.wordpress.org/plugin/jetpack.8.7.0.1.zip\";s:5:\"8.7.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.8.7.1.zip\";s:3:\"8.8\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.8.8.zip\";s:5:\"8.8.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.8.8.1.zip\";s:5:\"8.8.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.8.8.2.zip\";s:3:\"8.9\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.8.9.zip\";s:5:\"8.9.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.8.9.1.zip\";s:3:\"9.0\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.9.0.zip\";s:5:\"9.0.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.9.0.1.zip\";s:5:\"9.0.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.9.0.2.zip\";s:3:\"9.1\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.9.1.zip\";s:3:\"9.2\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.9.2.zip\";s:5:\"9.2.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.9.2.1.zip\";s:3:\"9.3\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.9.3.zip\";s:5:\"9.3.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.9.3.1.zip\";s:5:\"9.3.2\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.9.3.2.zip\";s:3:\"9.4\";s:54:\"https://downloads.wordpress.org/plugin/jetpack.9.4.zip\";s:8:\"9.4-beta\";s:59:\"https://downloads.wordpress.org/plugin/jetpack.9.4-beta.zip\";s:5:\"9.4.1\";s:56:\"https://downloads.wordpress.org/plugin/jetpack.9.4.1.zip\";s:5:\"trunk\";s:50:\"https://downloads.wordpress.org/plugin/jetpack.zip\";}s:11:\"donate_link\";s:0:\"\";s:12:\"contributors\";a:0:{}}s:23:\"loginizer/loginizer.php\";a:25:{s:4:\"name\";s:9:\"Loginizer\";s:4:\"slug\";s:9:\"loginizer\";s:7:\"version\";s:5:\"1.6.6\";s:6:\"author\";s:51:\"<a href=\"https://www.loginizer.com\">Softaculous</a>\";s:14:\"author_profile\";s:40:\"https://profiles.wordpress.org/loginizer\";s:8:\"requires\";s:3:\"3.0\";s:6:\"tested\";s:5:\"5.6.1\";s:12:\"requires_php\";s:3:\"5.5\";s:13:\"compatibility\";a:0:{}s:6:\"rating\";i:98;s:7:\"ratings\";a:5:{i:5;i:744;i:4;i:18;i:3;i:6;i:2;i:3;i:1;i:18;}s:11:\"num_ratings\";i:789;s:15:\"support_threads\";i:10;s:24:\"support_threads_resolved\";i:6;s:10:\"downloaded\";i:10605997;s:12:\"last_updated\";s:22:\"2021-01-22 12:42pm GMT\";s:5:\"added\";s:10:\"2016-01-27\";s:8:\"homepage\";s:47:\"https://wordpress.org/extend/plugins/loginizer/\";s:8:\"sections\";a:4:{s:11:\"description\";s:4722:\"<p>Loginizer is a WordPress plugin which helps you fight against bruteforce attack by blocking login for the IP after it reaches maximum retries allowed. You can blacklist or whitelist IPs for login using Loginizer. You can use various other features like Two Factor Auth, reCAPTCHA, PasswordLess Login, etc. to improve security of your website.</p>\n<p>Loginizer is actively used by more than 1000000+ WordPress websites.</p>\n<p>You can find our official documentation at <a href=\"https://loginizer.com/docs\" rel=\"nofollow ugc\">https://loginizer.com/docs</a>. We are also active in our community support forums on <a href=\"https://wordpress.org/support/plugin/loginizer\">wordpress.org</a> if you are one of our free users. Our Premium Support Ticket System is at <a href=\"https://loginizer.deskuss.com\" rel=\"nofollow ugc\">https://loginizer.deskuss.com</a></p>\n<p>Free Features :</p>\n<ul>\n<li>Brute force protection. IPs trying to brute force your website will be blocked for 15 minutes after 3 failed login attempts. After multiple lockouts the IP is blocked for 24 hours. This is the default configuration and can be changed from Loginizer -&gt; Brute force page in WordPress admin panel.</li>\n<li>Failed login attempts logs.</li>\n<li>Blacklist IPs</li>\n<li>Whitelist IPs</li>\n<li>Custom error messages on failed login.</li>\n<li>Permission check for important files and folders.</li>\n</ul>\n<h4>Get Support and Pro Features</h4>\n<p>Get professional support from our experts and pro features to take your site&#8217;s security to the next level with <a href=\"https://loginizer.com/pricing\" rel=\"nofollow ugc\">Loginizer-Security</a>.</p>\n<p>Pro Features :</p>\n<ul>\n<li>MD5 Checksum &#8211; of Core WordPress Files. The admin can check and ignore files as well.</li>\n<li>PasswordLess Login &#8211; At the time of Login, the username / email address will be asked and an email will be sent to the email address of that account with a temporary link to login.</li>\n<li>Two Factor Auth via Email &#8211; On login, an email will be sent to the email address of that account with a temporary 6 digit code to complete the login.</li>\n<li>Two Factor Auth via App &#8211; The user can configure the account with a 2FA App like Google Authenticator, Authy, etc.</li>\n<li>Login Challenge Question &#8211; The user can setup a Challenge Question and Answer as an additional security layer. After Login, the user will need to answer the question to complete the login.</li>\n<li>reCAPTCHA &#8211; Google&#8217;s reCAPTCHA v3/v2 can be configured for the Login screen, Comments Section, Registration Form, etc. to prevent automated brute force attacks. Supports WooCommerce as well.</li>\n<li>Rename Login Page &#8211; The Admin can rename the login URL (slug) to something different from wp-login.php to prevent automated brute force attacks.</li>\n<li>Rename WP-Admin URL &#8211; The Admin area in WordPress is accessed via wp-admin. With loginizer you can change it to anything e.g. site-admin</li>\n<li>Rename Login with Secrecy &#8211; If set, then all Login URL&#8217;s will still point to wp-login.php and users will have to access the New Login Slug by typing it in the browser.</li>\n<li>Disable XML-RPC &#8211; An option to simply disable XML-RPC in WordPress. Most of the WordPress users don&#8217;t need XML-RPC and can disable it to prevent automated brute force attacks.</li>\n<li>Rename XML-RPC &#8211; The Admin can rename the XML-RPC to something different from xmlrpc.php to prevent automated brute force attacks.</li>\n<li>Username Auto Blacklist &#8211; Attackers generally use common usernames like admin, administrator, or variations of your domain name / business name. You can specify such username here and Loginizer will auto-blacklist the IP Address(s) of clients who try to use such username(s).</li>\n<li>New Registration Domain Blacklist &#8211; If you would like to ban new registrations from a particular domain, you can use this utility to do so.</li>\n<li>Change the Admin Username &#8211; The Admin can rename the admin username to something more difficult.</li>\n<li>Auto Blacklist IPs &#8211; IPs will be auto blacklisted, if certain usernames saved by the Admin are used to login by malicious bots / users.</li>\n<li>Disable Pingbacks &#8211; Simple way to disable PingBacks.</li>\n</ul>\n<p>Features in Loginizer include:</p>\n<ul>\n<li>Blocks IP after maximum retries allowed</li>\n<li>Extended Lockout after maximum lockouts allowed</li>\n<li>Email notification to admin after max lockouts</li>\n<li>Blacklist IP/IP range</li>\n<li>Whitelist IP/IP range</li>\n<li>Check logs of failed attempts</li>\n<li>Create IP ranges</li>\n<li>Delete IP ranges</li>\n<li>Licensed under LGPLv2.1</li>\n<li>Safe &amp; Secure</li>\n</ul>\n\";s:12:\"installation\";s:104:\"<p>Upload the Loginizer plugin to your blog, Activate it.<br />\nThat&#8217;s it. You&#8217;re done!</p>\n\";s:9:\"changelog\";s:14084:\"<h4>1.6.6</h4>\n<ul>\n<li>[Improvement] For new installs, the loginizer_logs table will now use the server default MySQL Engine.</li>\n<li>[Improvement] For the login attempts blocked by Loginizer, some other Activity Logs plugin still reported such blocked attempt as a failed login attempt. </li>\n<li>[Bug Fix] In rare cases when the username received in failed login attempt was blank, Loginizer failed to save such requests in the failed login logs table. This is fixed now. </li>\n</ul>\n<h4>1.6.5</h4>\n<ul>\n<li>[Bug Fix] After Interim Login due to session timeout, the popup for login was not closed. This is fixed now.</li>\n<li>[Bug Fix] reCAPTCHA was not working on registration page with BuddyPress plugin. This is fixed now. </li>\n</ul>\n<h4>1.6.4</h4>\n<p>This version includes a security fix and we recommend all users to upgrade to 1.6.4 or higher immediately.</p>\n<ul>\n<li>\n<p>[Security Fix] : A properly crafted username used to login could lead to SQL injection. This has been fixed by using the prepare function in PHP which prepares the SQL query for safe execution.</p>\n</li>\n<li>\n<p>[Security Fix] : If the IP HTTP header was modified to have a null byte it could lead to stored XSS. This has been fixed by properly sanitizing the IP HTTP header before using the same.</p>\n</li>\n</ul>\n<h4>1.6.3</h4>\n<ul>\n<li>[Fix] Fixed a PHP Notice that was caused by a change released yesterday. </li>\n</ul>\n<h4>1.6.2</h4>\n<ul>\n<li>[Feature] Added option to send Password Less Login email as HTML.</li>\n<li>[Fix] When reCAPTCHA was disabled on Woocommerce checkout page, Loginizer reported captcha error if a user tried to register on checkout page. This is fixed now. </li>\n<li>[Fix] The email sent to admin for brute force login attempts will now contain the site url as well.</li>\n<li>[Fix] Fixed PHP Notice on Two Factor Authentication page.</li>\n</ul>\n<h4>1.6.1</h4>\n<ul>\n<li>[Fix] The captcha on Registration form when using WooCommerce was not being rendered if the &#8220;WooCommerce Checkout&#8221; captcha setting was disabled in Loginizer. This is fixed now and this captcha can be disabled with &#8220;Registration Form&#8221; captcha setting in Loginizer. </li>\n<li>[Fix] Minor checkbox pre filling UI fix on Two Factor Authentication page.</li>\n</ul>\n<h4>1.6.0</h4>\n<ul>\n<li>[Feature] Admin can white list an IP or an IP range for Two Factor Authentication.</li>\n<li>[Fix] If the plugins or themes which are included in the default WordPress package were not updated, the Checksum reported that the files for such plugins and themes did not matched. This is fixed now. </li>\n</ul>\n<h4>1.5.9</h4>\n<ul>\n<li>[Task] Admins can now customize email template for 2FA OTP via email.</li>\n<li>[Task] Admins can now customize the 2FA messages on login screen.</li>\n<li>[Fix] Changed the OTP via App field on login page to password type.</li>\n</ul>\n<h4>1.5.8</h4>\n<ul>\n<li>[Task] Permission for / folder was suggested as 0755 and 0750 permission which is secure was reported as insecure. This is fixed now. </li>\n<li>[Fix] Prevent PHP Deprecated Warning on plugin upgrade page on servers running PHP 7.3+</li>\n</ul>\n<h4>1.5.7</h4>\n<ul>\n<li>[Fix] Prevent PHP Notice on 1st failed login attempt from an IP.</li>\n</ul>\n<h4>1.5.6</h4>\n<ul>\n<li>[Task] Admins can now subscribe to our newsletter if they decide to opt in.</li>\n</ul>\n<h4>1.5.5</h4>\n<ul>\n<li>[Bug Fix] Remember me during login was not working with 2FA features. This is fixed. </li>\n<li>[Task] Loginizer is now supported for translation via WordPress.</li>\n<li>[Task] Added option to fully customize the Lockout error message.</li>\n</ul>\n<h4>1.5.4</h4>\n<ul>\n<li>[Task] Added option to customize Lockout Error message.</li>\n</ul>\n<h4>1.5.3</h4>\n<ul>\n<li>[Task] Compatible with WordPress 5.5</li>\n<li>[Bug Fix] Due to a conflict with some plugin the upgrade for Loginizer Premium version did not work. This is fixed.</li>\n</ul>\n<h4>1.5.2</h4>\n<ul>\n<li>[Task] Some strings were not available in translations. They can now be translated.</li>\n</ul>\n<h4>1.5.1</h4>\n<ul>\n<li>[Task] Allowed to change the username of any administrator account. Previously it was supported only for user id 1</li>\n<li>[Bug Fix] Fixed some lines that generated PHP notice</li>\n</ul>\n<h4>1.5.0</h4>\n<ul>\n<li>[Task] Admins can now customize &#8220;attempt(s) left&#8221; error message.</li>\n</ul>\n<h4>1.4.9</h4>\n<ul>\n<li>[Bug Fix] Prevent brute force on 2FA pages.</li>\n</ul>\n<h4>1.4.8</h4>\n<ul>\n<li>[Premium Feature] Added Google reCAPTCHA v3 and v2 invisible.</li>\n</ul>\n<h4>1.4.7</h4>\n<ul>\n<li>[Security Fix] Our team internally conducted a security audit and have fixed couple of security issues. We recommend all users to upgrade to the latest version asap.</li>\n</ul>\n<h4>1.4.6</h4>\n<ul>\n<li>[Task] Added Timezone offset in the Brute Force attempts list to get the exact time of the failed login attempt.</li>\n<li>[Bug Fix] For HTTP_X_FORWARDED_FOR if the value had multiple IPs including proxied IPs, the user IP detection failed. This is fixed.</li>\n<li>[Bug Fix] Undefined variable was used in the title on the dashboard page. This is fixed.</li>\n</ul>\n<h4>1.4.5</h4>\n<ul>\n<li>[Announcement] Loginizer has joined forces with Softaculous team. </li>\n<li>[Task] Added OTP validity time in the email sent for OTP for login.</li>\n<li>[Bug Fix] In the premium version the Math Captcha used to fail in some conditions. This is fixed. </li>\n</ul>\n<h4>1.4.4</h4>\n<ul>\n<li>[Task] Made Loginizer compatible with PHP 7.4</li>\n<li>[Bug Fix] The password field was not hidden in some themes for PasswordLess Login. This is fixed.</li>\n</ul>\n<h4>1.4.3</h4>\n<ul>\n<li>[Bug Fix] At the time of login if recaptcha or 2FA using OTP was enabled and if you check mark on &#8220;Remember me&#8221;, the login used to go to an invalid redirect URL and did not load anything. This has been fixed now.</li>\n</ul>\n<h4>1.4.2</h4>\n<ul>\n<li>[Task] Tested up to: WordPress 5.2.0</li>\n<li>[Bug Fix] Placement of Captcha corrected for WooCommerce at the time of checkout for endusers.</li>\n<li>[Bug Fix] Checksum check shall now skip for the files which are present in default WordPress package and does not exist in the installation like deleted theme(s)/plugin(s).</li>\n<li>[Bug Fix] Grammar correction</li>\n</ul>\n<h4>1.4.1</h4>\n<ul>\n<li>[Task] Tested up to: WordPress 5.0.2</li>\n<li>[Task] Refresh license will throw an error if the response received from our server is invalid</li>\n<li>[Bug Fix] The OTP input box (with respect to 2FA via SMS) was empty if the user was freshly registered and did not login at all. This is fixed.</li>\n</ul>\n<h4>1.4.0</h4>\n<ul>\n<li>[Feature] New Registration Domain Blacklist &#8211; If you would like to ban new registrations from a particular domain, you can use this utility to do so.</li>\n<li>[Feature] Made Loginizer Security for BuddyPress compatibility.</li>\n<li>[Task] Added a method to reset wp-admin rename settings if you get locked out.</li>\n<li>[Bug Fix] There is an XSS bug introduced in version 1.3.8. This is fixed. Please upgrade ASAP.</li>\n<li>[Bug Fix] In the user 2FA security wizard, the default selected option was wrongly shown when the user had not set any preference for 2FA. This is fixed. </li>\n</ul>\n<h4>1.3.9</h4>\n<ul>\n<li>[Feature] Added an option to Enable / Disable Brute Force checks.</li>\n<li>[Feature] Added the feature to log the URL of the page from which the brute force attempt is being made.</li>\n<li>[Bug Fix] Blanking the login slug used to show the value after submission. This is fixed.</li>\n<li>[Bug Fix] Allowed HTML chars in wp_admin_msg for renaming WP-ADMIN.</li>\n</ul>\n<h4>1.3.8</h4>\n<ul>\n<li>[Feature] Added Roles selection for Two Factor Authentication. The Admin can now enable 2FA for specific roles.</li>\n<li>[Feature] Added a Tester for WP-Admin Slug Renaming feature. Now you can test the new slug before saving it.</li>\n<li>[Feature] Added option to customize the Passwordless email being sent to the user.</li>\n<li>[Feature] Added a custom WP-Admin restriction message if wp-admin is restricted.</li>\n<li>[Feature] Added an option to Delete the entire Blacklist / Whitelist IP Ranges.</li>\n<li>[Feature] Custom IP Header added as an option for detecting the IP as per the Proxy settings of a server.</li>\n<li>[Task] Added an option to clear reCAPTCHA settings.</li>\n<li>[Task] Added Debugger in Updater</li>\n<li>[Task] Updater will show &#8220;Install License Key to check for Updates&#8221;</li>\n<li>[Bug Fix] In WooCommerce the number of login retries left was not being shown. This is fixed.</li>\n</ul>\n<h4>1.3.7</h4>\n<ul>\n<li>[Bug Fix] Blacklist and Whitelist IPs were not being deleted. This is fixed.</li>\n</ul>\n<h4>1.3.6</h4>\n<ul>\n<li>[Feature] Pagination added to the Blacklist and Whitelist IPs</li>\n<li>[Bug Fix] There used to be a login issue over SSL when wp-admin area is renamed. This is fixed.</li>\n<li>[Bug Fix] SQL Injection fix for X-Forwarded-For. This is fixed. Vulnerability was found by Jonas Lejon of WPScans.com</li>\n<li>[Bug Fix] There was a missing referrer check in Blacklist and Whitelist IP Wizard. This is fixed.</li>\n</ul>\n<h4>1.3.5</h4>\n<ul>\n<li>[Feature] Added a simple Math Captcha to show Maths Questions, if someone doesn’t want to use Google Captcha</li>\n<li>[Feature] Added a wizard for admins to set their own language strings for Brute Force messages</li>\n<li>[Bug Fix] In WooCommerce the Lost Password, Reset Password and Comment Form captcha verification failed. This is fixed.</li>\n<li>[Bug Fix] Hide Captcha for logged in users was not working. This is fixed.</li>\n<li>[Bug Fix] Twitter box shown in Loginizer was not accessed over HTTPS.</li>\n</ul>\n<h4>1.3.4</h4>\n<ul>\n<li>[Bug Fix] Fixed the BigInteger Class for PHP 7 compatibility.</li>\n</ul>\n<h4>1.3.3</h4>\n<ul>\n<li>[Feature] IPv6 support has been added.</li>\n<li>[Feature] The last attempted username will now be shown in the Login Logs.</li>\n<li>[Bug Fix] If the login page had been renamed, and wp-login.php was accessed over HTTPS, the login screen was shown instead of 404 not found. This is now fixed.</li>\n<li>[Bug Fix] If the user had used a &#8220;/&#8221; in the rename login slug, the new slug would not work without the &#8220;/&#8221; in the URL. This is now fixed.</li>\n<li>[Bug Fix] The license key could get reset in some cases. This also caused plugin updates to fail. This is now fixed.</li>\n<li>[Bug Fix] Wild Cards “*” in the Username Auto Blacklist did not work. This is now fixed.</li>\n<li>[Bug Fix] The documentation in the plugin was pointing to a wrong link. This is now fixed.</li>\n</ul>\n<h4>1.3.2</h4>\n<ul>\n<li>[Feature] Rename the wp-admin access URL is now possible with Loginizer</li>\n<li>[Feature] WooCommerce support has been improved for reCAPTCHA </li>\n<li>[Feature] Loginizer will now show a Notification to the Enduser to setup the preferred 2FA settings</li>\n<li>[Feature] Added option to choose between REMOTE_ADDR, HTTP_CLIENT_IP and HTTP_X_FORWARDED for websites behind a proxy </li>\n<li>[Task] Multiple reCAPTHCA on a single page is now supported</li>\n<li>[Task] Added a link to Google&#8217;s reCAPTCHA website for easy access in our reCAPTCHA wizard</li>\n</ul>\n<h4>1.3.1</h4>\n<ul>\n<li>[Feature] Admin&#8217;s can now remove a user&#8217;s Two Factor Authentication if needed</li>\n<li>[Feature] Adden an option to change the Admin Username</li>\n<li>[Feature] Auto Blacklist IPs if certain usernames saved by the Admin are used to login by malicious bots / users</li>\n<li>[Feature] The Login attempt logs will now be shown as per the last attempt TIME and in Descending Order</li>\n<li>[Feature] Added an option to Reset the Login attempts for all or specific IPs </li>\n</ul>\n<h4>1.3.0</h4>\n<ul>\n<li>[Feature] Added MD5 File Checksum feature. If any core files are changed, Loginizer will log the differences and notify the Admin</li>\n<li>[Feature] Added an option to make Email OTP as the default Two Factor Auth when a user has not set the OTP method of their choice</li>\n<li>[Feature] Added WooCommerce support for Captcha forms</li>\n<li>[Feature] Added pagination in the Brute Force Logs Wizard</li>\n<li>[Bug Fix] Disabling and Re-Enabling Loginizer caused an SQL error</li>\n</ul>\n<h4>1.2.0</h4>\n<ul>\n<li>[Feature] Rename Login with Secrecy : If set, then all Login URL&#8217;s will still point to wp-login.php and users will have to access the New Login Slug by typing it in the browser.</li>\n<li>[Task] The brute force logs will now be sorted as per the time of failed login attemps</li>\n<li>[Bug Fix] Dashboard showed wrong permissions if wp-content path had been changed</li>\n<li>[Bug Fix] Added Directory path to include files which caused issues with some plugins</li>\n</ul>\n<h4>1.1.1</h4>\n<ul>\n<li>[Bug Fix] Added ABSPATH instead of get_home_path()</li>\n</ul>\n<h4>1.1.0</h4>\n<ul>\n<li>[Feature] PasswordLess Login</li>\n<li>[Feature] Two Factor Auth &#8211; Email</li>\n<li>[Feature] Two Factor Auth &#8211; App</li>\n<li>[Feature] Login Challenge Question</li>\n<li>[Feature] reCAPTCHA</li>\n<li>[Feature] Rename Login Page</li>\n<li>[Feature] Disable XML-RPC</li>\n<li>[Feature] Rename XML-RPC</li>\n<li>[Feature] Disable Pingbacks</li>\n<li>[Feature] New Dashboard</li>\n<li>[Feature] System Information added in the new Dashboard</li>\n<li>[Feature] File Permissions added in the new Dashboard</li>\n<li>[Feature] New UI</li>\n<li>[Bug Fix] Fixed bug to add IP Range from 0.0.0.1 &#8211; 255.255.255.255</li>\n<li>[Bug Fix] Removed /e from preg_replace causing warnings in PHP</li>\n</ul>\n<h4>1.0.2</h4>\n<ul>\n<li>Fixed Extended Lockout bug</li>\n<li>Fixed Lockout bug</li>\n<li>Handle login attempts via XML-RPC</li>\n</ul>\n<h4>1.0.1</h4>\n<ul>\n<li>Database structure changes to make the plugin work faster</li>\n<li>Minor fixes</li>\n</ul>\n<h4>1.0</h4>\n<ul>\n<li>Blocks IP after maximum retries allowed</li>\n<li>Extended Lockout after maximum lockouts allowed</li>\n<li>Email notification to admin after max lockouts</li>\n<li>Blacklist IP/IP range</li>\n<li>Whitelist IP/IP range</li>\n<li>Check logs of failed attempts</li>\n<li>Create IP ranges</li>\n<li>Delete IP ranges</li>\n<li>Licensed under LGPLv2.1</li>\n<li>Safe &amp; Secure</li>\n</ul>\n\";s:11:\"screenshots\";s:695:\"<ol><li><a href=\"https://ps.w.org/loginizer/trunk/screenshot-1.png?rev=2460967\"><img src=\"https://ps.w.org/loginizer/trunk/screenshot-1.png?rev=2460967\" alt=\"Login Failed Error message\"></a><p>Login Failed Error message</p></li><li><a href=\"https://ps.w.org/loginizer/trunk/screenshot-2.png?rev=2460967\"><img src=\"https://ps.w.org/loginizer/trunk/screenshot-2.png?rev=2460967\" alt=\"Loginizer Dashboard page\"></a><p>Loginizer Dashboard page</p></li><li><a href=\"https://ps.w.org/loginizer/trunk/screenshot-3.png?rev=2460967\"><img src=\"https://ps.w.org/loginizer/trunk/screenshot-3.png?rev=2460967\" alt=\"Loginizer Brute Force Settings page\"></a><p>Loginizer Brute Force Settings page</p></li></ol>\";}s:13:\"download_link\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.6.6.zip\";s:11:\"screenshots\";a:3:{i:1;a:2:{s:3:\"src\";s:61:\"https://ps.w.org/loginizer/trunk/screenshot-1.png?rev=2460967\";s:7:\"caption\";s:26:\"Login Failed Error message\";}i:2;a:2:{s:3:\"src\";s:61:\"https://ps.w.org/loginizer/trunk/screenshot-2.png?rev=2460967\";s:7:\"caption\";s:24:\"Loginizer Dashboard page\";}i:3;a:2:{s:3:\"src\";s:61:\"https://ps.w.org/loginizer/trunk/screenshot-3.png?rev=2460967\";s:7:\"caption\";s:35:\"Loginizer Brute Force Settings page\";}}s:4:\"tags\";a:5:{s:6:\"access\";s:6:\"access\";s:5:\"admin\";s:5:\"admin\";s:5:\"login\";s:5:\"login\";s:9:\"loginizer\";s:9:\"Loginizer\";s:4:\"logs\";s:4:\"logs\";}s:8:\"versions\";a:44:{s:3:\"1.0\";s:56:\"https://downloads.wordpress.org/plugin/loginizer.1.0.zip\";s:5:\"1.0.1\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.0.1.zip\";s:5:\"1.0.2\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.0.2.zip\";s:5:\"1.1.0\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.1.0.zip\";s:5:\"1.1.1\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.1.1.zip\";s:5:\"1.2.0\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.2.0.zip\";s:5:\"1.3.0\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.3.0.zip\";s:5:\"1.3.1\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.3.1.zip\";s:5:\"1.3.2\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.3.2.zip\";s:5:\"1.3.3\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.3.3.zip\";s:5:\"1.3.4\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.3.4.zip\";s:5:\"1.3.5\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.3.5.zip\";s:5:\"1.3.6\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.3.6.zip\";s:5:\"1.3.7\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.3.7.zip\";s:5:\"1.3.8\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.3.8.zip\";s:5:\"1.3.9\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.3.9.zip\";s:5:\"1.4.0\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.4.0.zip\";s:5:\"1.4.1\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.4.1.zip\";s:5:\"1.4.2\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.4.2.zip\";s:5:\"1.4.3\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.4.3.zip\";s:5:\"1.4.4\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.4.4.zip\";s:5:\"1.4.5\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.4.5.zip\";s:5:\"1.4.6\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.4.6.zip\";s:5:\"1.4.7\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.4.7.zip\";s:5:\"1.4.8\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.4.8.zip\";s:5:\"1.4.9\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.4.9.zip\";s:5:\"1.5.0\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.5.0.zip\";s:5:\"1.5.1\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.5.1.zip\";s:5:\"1.5.2\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.5.2.zip\";s:5:\"1.5.3\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.5.3.zip\";s:5:\"1.5.4\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.5.4.zip\";s:5:\"1.5.5\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.5.5.zip\";s:5:\"1.5.6\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.5.6.zip\";s:5:\"1.5.7\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.5.7.zip\";s:5:\"1.5.8\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.5.8.zip\";s:5:\"1.5.9\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.5.9.zip\";s:5:\"1.6.0\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.6.0.zip\";s:5:\"1.6.1\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.6.1.zip\";s:5:\"1.6.2\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.6.2.zip\";s:5:\"1.6.3\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.6.3.zip\";s:5:\"1.6.4\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.6.4.zip\";s:5:\"1.6.5\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.6.5.zip\";s:5:\"1.6.6\";s:58:\"https://downloads.wordpress.org/plugin/loginizer.1.6.6.zip\";s:5:\"trunk\";s:52:\"https://downloads.wordpress.org/plugin/loginizer.zip\";}s:11:\"donate_link\";s:0:\"\";s:12:\"contributors\";a:0:{}}s:32:\"wp-simple-firewall/icwp-wpsf.php\";a:25:{s:4:\"name\";s:47:\"Shield Security: Powerful All-In-One Protection\";s:4:\"slug\";s:18:\"wp-simple-firewall\";s:7:\"version\";s:6:\"10.2.4\";s:6:\"author\";s:49:\"<a href=\"https://shsec.io/bv\">Shield Security</a>\";s:14:\"author_profile\";s:45:\"https://profiles.wordpress.org/paultgoodchild\";s:8:\"requires\";s:5:\"3.5.2\";s:6:\"tested\";s:5:\"5.6.1\";s:12:\"requires_php\";s:3:\"7.0\";s:13:\"compatibility\";a:0:{}s:6:\"rating\";i:98;s:7:\"ratings\";a:5:{i:5;i:891;i:4;i:24;i:3;i:10;i:2;i:6;i:1;i:16;}s:11:\"num_ratings\";i:947;s:15:\"support_threads\";i:10;s:24:\"support_threads_resolved\";i:10;s:10:\"downloaded\";i:8768387;s:12:\"last_updated\";s:21:\"2021-02-15 5:30pm GMT\";s:5:\"added\";s:10:\"2013-07-09\";s:8:\"homepage\";s:19:\"https://shsec.io/2f\";s:8:\"sections\";a:5:{s:11:\"description\";s:6066:\"<h4>Get the highest rated 5* Security Plugin for WordPress</h4>\n<p>Don&#8217;t <em>settle</em> for the same security plugin just because everyone else does.</p>\n<h4>Shield makes Security for WordPress easy</h4>\n<p>There&#8217;s no reason for security to be so complicated.</p>\n<p>Shield is the easiest security plugin to setup &#8211; you simply activate it and as you learn more, you can tweak the settings to suit your needs best.</p>\n<h4>Non-stop Notifications Are Not Okay.</h4>\n<p>Wouldn&#8217;t it be great if your Security plugin took responsibility and handled problems for you without non-stop email notifications?</p>\n<p>Shield does exactly this. It&#8217;s your Silent Guardian.</p>\n<h4>Shield Features You&#8217;ll Absolutely Love</h4>\n<ul>\n<li><a href=\"https://shsec.io/j0\" rel=\"nofollow ugc\">Automatic Bot &amp; IP Blocking</a> &#8211; points-based system (that you control) to detect bad bots and block them.</li>\n<li>Block Bot Attacks On Important Forms:\n<ul>\n<li>Login</li>\n<li>Registration</li>\n<li>Password Reset</li>\n<li>[ShieldPRO] WooCommerce &amp; Easy Digital Downloads</li>\n<li>[ShieldPRO] Memberpress, LearnPress, BuddyPress, WP Members, ProfileBuilder</li>\n</ul>\n</li>\n<li><a href=\"https://shsec.io/iw\" rel=\"nofollow ugc\">Limit Login Attempts + Login Cooldown System</a></li>\n<li>Powerful Firewall Rules</li>\n<li>Restricted Security Admin Access\n<ul>\n<li><a href=\"https://shsec.io/ix\" rel=\"nofollow ugc\">Prevents Unauthorized Changes To Site Even By Admins</a>.</li>\n</ul>\n</li>\n<li>(MFA) <a href=\"https://shsec.io/iy\" rel=\"nofollow ugc\">Two-Factor / Multi-Factor Login Authentication</a>:\n<ul>\n<li>Email</li>\n<li>Google Authenticator</li>\n<li>Yubikey</li>\n<li>[ShieldPRO] U2F Keys</li>\n<li>[ShieldPRO] Backup Login Codes</li>\n<li>[ShieldPRO] Multiple Yubikey per User</li>\n<li>[ShieldPRO] Remember Me (reduces 2FA requests for users)</li>\n</ul>\n</li>\n<li><a href=\"https://shsec.io/iz\" rel=\"nofollow ugc\">Block XML-RPC</a> (<em>including</em> Pingbacks and Trackbacks)</li>\n<li>Block Anonymous Rest API</li>\n<li>Block, Bypass and Analyse IP Addresses\n<ul>\n<li><a href=\"https://shsec.io/j0\" rel=\"nofollow ugc\">Automatic IP Address Blocking Using Points-Based/Offenses System</a></li>\n<li>Block or Bypass individual IPs</li>\n<li>Block or Bypass IP Subnets</li>\n<li>Full IP Analysis in 1 place to see their activity on your sites</li>\n</ul>\n</li>\n<li>Complete WordPress Scanning for Intrusions and Hacks\n<ul>\n<li>Detect File Changes &#8211; <a href=\"https://shsec.io/j1\" rel=\"nofollow ugc\">Scan &amp; Repair WordPress Core Files</a></li>\n<li><a href=\"https://shsec.io/j2\" rel=\"nofollow ugc\">Detect Unknown/Suspicious PHP Files</a></li>\n<li>Detect Abandoned Plugins.</li>\n<li>[ShieldPRO] Malware Scanner &#8211; detects known and unknown malware.</li>\n<li>[ShieldPRO] Plugin and Theme file scanning &#8211; identify file changes in your plugins/themes.</li>\n<li>[ShieldPRO] Detect Plugins/Themes With Known Vulnerabilities.</li>\n</ul>\n</li>\n<li><a href=\"https://shsec.io/j3\" rel=\"nofollow ugc\">Create a <strong>Custom Login URL</strong> by hiding wp-login.php</a></li>\n<li>Detect (and optionally Block) <a href=\"https://shsec.io/jf\" rel=\"nofollow ugc\">Comment SPAM from Bots and Humans</a>.</li>\n<li>reCAPTCHA &amp; <a href=\"https://shsec.io/j4\" rel=\"nofollow ugc\">hCAPTCHA</a> support</li>\n<li><strong>Never Block Google</strong>: Automatic Detection and Bypass for GoogleBot, Bing and other Official Search Engines including:\n<ul>\n<li>Google</li>\n<li>Bing,</li>\n<li>DuckDuckGo</li>\n<li>Yahoo!</li>\n<li>Baidu</li>\n<li>Apple</li>\n<li>Yandex</li>\n</ul>\n</li>\n<li>Automatically Detect 3rd Party Services and Prevent Blocking Of:\n<ul>\n<li>ManageWP / iControlWP / MainWP</li>\n<li>Pingdom, NodePing, Statuscake, UptimeRobot, GTMetrix</li>\n<li>Stripe, PayPal IPN</li>\n<li>CloudFlare, SEMRush</li>\n</ul>\n</li>\n<li>Full Audit Trail &#8211; <a href=\"https://shsec.io/j5\" rel=\"nofollow ugc\">Monitor <strong>All</strong> Site Activity, including</a>:\n<ul>\n<li>All login/registration attempts</li>\n<li>Plugin and Theme installation, activation, deactivation etc.</li>\n<li>User creation and promotion</li>\n<li>Page/Post create, update, delete</li>\n</ul>\n</li>\n<li>Advanced User Sessions Control\n<ul>\n<li>Restrict Multiple User Login</li>\n<li>Restrict Users Session To IP</li>\n<li>Block Use Of Pwned Passwords</li>\n<li>Block User Enumeration (?author=x)</li>\n<li>[ShieldPRO] User Suspend &#8211; manual and automatic.</li>\n</ul>\n</li>\n<li>Full/Automatic Support for All IP Address Sources including Proxy Support</li>\n<li><a href=\"https://shsec.io/j7\" rel=\"nofollow ugc\">Full Traffic Log and Request Monitoring</a></li>\n<li><a href=\"https://shsec.io/j6\" rel=\"nofollow ugc\">HTTP Security Headers &amp; Content Security Policies (CSP)</a></li>\n</ul>\n<h4><a href=\"https://shsec.io/shieldfeatures\" rel=\"nofollow ugc\">Full Shield Security Features List</a></h4>\n<h3>Dedicated Premium Support When You Go PRO</h3>\n<p>The Shield Security team prioritises email technical support over the WordPress.org forums.<br />\nIndividual, dedicated technical support is only available to customers who have <a href=\"https://shsec.io/ab\" rel=\"nofollow ugc\">purchased Shield Pro</a>.</p>\n<p>Discover all the perks turning your security Pro at <a href=\"https://shsec.io/ab\" rel=\"nofollow ugc\">our Shield Security store</a>.</p>\n<h3>Our Mission</h3>\n<p>We&#8217;re on a mission to liberate people who manage websites from unnecessarily repetitive work by automating as much as possible for you.</p>\n<p>We have three rules that apply to everything we do, and you&#8217;ll see these when you use our products or contact us for help:</p>\n<ol>\n<li>Make everything as simple and easy-to-use as possible (and no simpler!).</li>\n<li>Be reliable – we make sure our products do what they promise.</li>\n<li>Take ownership for resolving problems &#8211; we will solve the problem if we can, or point you towards the solution.</li>\n</ol>\n<p>This all combines to make it much more difficult for spambots (and also human spammers as they have to now wait) to work their dirty magic ?</p>\n\";s:12:\"installation\";s:761:\"<p>Note: When you enable the plugin, the firewall is not automatically turned on. This plugin contains various different sections of<br />\nprotection for your site and you should choose which you need based on your own requirements.</p>\n<p>Why do we do this? It&#8217;s simple: performance and optimization &#8211; there is no reason to automatically turn on features for people that don&#8217;t<br />\nneed it as each site and set of requirements is different.</p>\n<p>This plugin should install as any other WordPress.org repository plugin.</p>\n<ol>\n<li>Browse to Plugins -&gt; Add Plugin</li>\n<li>Search: Shield</li>\n<li>Click Install</li>\n<li>Click to Activate.</li>\n</ol>\n<p>A new menu item will appear on the left-hand side called &#8216;Shield&#8217;.</p>\n\";s:3:\"faq\";s:9937:\"<p>Please see the dedicated <a href=\"https://shsec.io/firewallhelp\" rel=\"nofollow ugc\">help centre</a> for details on features and some FAQs.</p>\n\n<dt id=\'how%20does%20the%20shield%20compare%20with%20other%20wordpress%20security%20plugins%3F\'>\nHow does the Shield compare with other WordPress Security Plugins?\n</h4>\n<p>\n<p>Easy &#8211; we&#8217;re just better! ?</p>\n<p>Firstly, we don&#8217;t modify a single core WordPress or web hosting file. This is important and explains why randomly you upgrade your security plugin and your site dies.</p>\n<p>Ideally you shouldn&#8217;t use this along side other Anti-SPAM plugins or security plugins. If there is a feature you need, please feel free to suggest it in the support forums.</p>\n</p>\n<dt id=\'my%20server%20has%20a%20firewall%2C%20why%20do%20i%20need%20this%20plugin%3F\'>\nMy server has a firewall, why do I need this plugin?\n</h4>\n<p>\n<p>This plugin is an application layer firewall, not a server/network firewall.  It is designed to interpret web calls to your site to<br />\nlook for attempts to circumvent it and gain unauthorized access.</p>\n<p>Your network firewall is designed to restrict access to your server based on certain types of network traffic.  The Shield<br />\nis designed to restrict access to your site, based on certain type of web calls.</p>\n</p>\n<dt id=\'how%20does%20the%20ip%20whitelist%20work%3F\'>\nHow does the IP Whitelist work?\n</h4>\n<p>\n<p>Any IP address that is on the whitelist will not be subject to <strong>any of the firewall processing</strong>.  This setting takes priority over all other settings.</p>\n</p>\n<dt id=\'does%20the%20ip%20whitelist%20support%20ip%20ranges%3F\'>\nDoes the IP Whitelist support IP ranges?\n</h4>\n<p>\n<p>Yes. To specify a range you use CIDR notation.  E.g. ABC.DEF.GHJ.KMP/16</p>\n</p>\n<dt id=\'i%20want%20to%20review%20and%20manage%20ip%20addresses%2C%20where%20can%20i%20do%20that%3F\'>\nI want to review and manage IP addresses, where can I do that?\n</h4>\n<p>\n<p>You can use IP Lists section. This is an essential tool you can use to analyse IP address, review information concerning blocked and bypassed IP addresses.</p>\n<p>It shows you geo-location information and all the request made to your site by that IP, including offenses and any logged-in users.</p>\n</p>\n<dt id=\'i%27ve%20locked%20myself%20out%20from%20my%20own%20site%21\'>\nI&#8217;ve locked myself out from my own site!\n</h4>\n<p>\n<p>This happens when any the following 3 conditions are met:</p>\n<ul>\n<li>you have added your IP address to the firewall blacklist,</li>\n<li>you have enabled 2 factor authentication and email doesn&#8217;t work on your site (and you haven&#8217;t chosen the override option)</li>\n</ul>\n<p>You can completely turn OFF (and ON) the Shield by creating a special file in the plugin folder.</p>\n<p>Here&#8217;s how:</p>\n<ol>\n<li>Open up an FTP connection to your site, browse to the plugin folder /wp-content/plugins/wp-simple-firewall/</li>\n<li>Create a new file in here called: &#8220;forceOff&#8221;.</li>\n<li>Load any page on your WordPress site.</li>\n<li>After this, you&#8217;ll find your Shield has been switched off.</li>\n</ol>\n<p>If you want to turn the firewall on in the same way, create a file called &#8220;forceOn&#8221;.</p>\n<p>Remember: If you leave one of these files on the server, it will override your on/off settings, so you should delete it when you no longer need it.</p>\n</p>\n<dt id=\'which%20takes%20precedence...%20whitelist%20or%20blacklist%3F\'>\nWhich takes precedence&#8230; whitelist or blacklist?\n</h4>\n<p>\n<p>Whitelist. So if you have the same address in both lists, it&#8217;ll be whitelisted and allowed to pass before the blacklist comes into effect.</p>\n</p>\n<dt id=\'can%20i%20assist%20with%20development%3F\'>\nCan I assist with development?\n</h4>\n<p>\n<p>Yes! We actively <a href=\"https://github.com/FernleafSystems/wp-simple-firewall\" rel=\"nofollow ugc\">develop our plugin on Github</a> and the best thing you can do is submit pull request and bug reports which we&#8217;ll review.</p>\n</p>\n<dt id=\'how%20does%20the%20pages%2Fparameters%20whitelist%20work%3F\'>\nHow does the pages/parameters whitelist work?\n</h4>\n<p>\n<p>It is a comma-separated list of pages and parameters. A NEW LINE should be taken for each new page name and its associated parameters.</p>\n<p>The first entry on each line (before the first comma) is the page name. The rest of the items on the line are the parameters.</p>\n<p>The following are some simple examples to illustrate:</p>\n<p><strong>edit.php, featured</strong></p>\n<p>On the edit.php page, the parameter with the name &#8216;featured&#8217; will be ignored.</p>\n<p><strong>admin.php, url, param01, password</strong></p>\n<p>Any parameters that are passed to the page ending in &#8216;admin.php&#8217; with the names &#8216;url&#8217;, &#8216;param01&#8217; and &#8216;password&#8217; will<br />\nbe excluded from the firewall processing.</p>\n<p>*, url, param, password</p>\n<p>Putting a star first means that these exclusions apply to all pages.  So for every page that is accessed, all the parameters<br />\nthat are url, param and password will be ignored by the firewall.</p>\n</p>\n<dt id=\'how%20does%20the%20login%20cooldown%20work%3F\'>\nHow does the login cooldown work?\n</h4>\n<p>\n<p>Login Cooldown prevents more than 1 login attempt to your site every &#8220;so-many&#8221; seconds.  So if you enable a login cooldown<br />\nof 60 seconds, only 1 login attempt will be processed every 60 seconds.  If you login incorrectly, you wont be able to attempt another<br />\nlogin for a further 60 seconds.</p>\n<p>This system completely blocks any level of brute-force login attacks and a cooldown of just 1 second goes a long way.</p>\n<p>More Info: https://shsec.io/2t</p>\n</p>\n<dt id=\'how%20does%20the%20gasp%20login%20guard%20work%3F\'>\nHow does the GASP Login Guard work?\n</h4>\n<p>\n<p>This is best <a href=\"https://shsec.io/2u\" rel=\"nofollow ugc\">described on the blog</a></p>\n</p>\n<dt id=\'how%20does%20the%202-factor%20authentication%20work%3F\'>\nHow does the 2-factor authentication work?\n</h4>\n<p>\n<p>2-Factor Authentication <a href=\"https://shsec.io/2v\" rel=\"nofollow ugc\">is best described here</a>.</p>\n</p>\n<dt id=\'i%27m%20not%20receiving%20the%20email%20with%202fa%20verification%20code.%3F\'>\nI&#8217;m not receiving the email with 2FA verification code.?\n</h4>\n<p>\n<p>Email delivery is a huge problem with WordPress sites and is very common.</p>\n<p>Your WordPress is not designed to send emails. The best solution is to use a service that is dedicated to the purpose of sending emails.</p>\n<p><a href=\"https://shsec.io/jj\" rel=\"nofollow ugc\">This is what we recommend</a>.</p>\n</p>\n<dt id=\'i%27m%20getting%20an%20update%20message%20although%20i%20have%20auto%20update%20enabled%3F\'>\nI&#8217;m getting an update message although I have auto update enabled?\n</h4>\n<p>\n<p>The Automatic (Background) WordPress updates happens on a WordPress schedule &#8211; it doesn&#8217;t happen immediately when an update is detected.<br />\nYou can either manually upgrade, or WordPress will handle it in due course.</p>\n</p>\n<dt id=\'i%27m%20getting%20large%20volumes%20of%20comment%20spam.%20how%20can%20i%20stop%20this%3F\'>\nI&#8217;m getting large volumes of comment SPAM. How can I stop this?\n</h4>\n<p>\n<p>You can block 100% of automated spam bots and also block and analyse human-generated spam. <a href=\"https://shsec.io/jg\" rel=\"nofollow ugc\">This is best described here</a>.</p>\n</p>\n<dt id=\'do%20you%20offer%20white%20label%3F\'>\nDo you offer White Label?\n</h4>\n<p>\n<p>Yes, we do. You can essentially rename the Shield plugin to whatever you would like it to be.</p>\n<p>It ensures a more consistent brand offering and presents your business offering as a more holistic, integrated solution.</p>\n<p>We go into <a href=\"https://shsec.io/jh\" rel=\"nofollow ugc\">further detail here</a>.</p>\n</p>\n<dt id=\'i%E2%80%99d%20like%20to%20customise%202fa%20emails%20sent%20to%20my%20site%20users.%20how%20can%20i%20do%20that%3F\'>\nI’d like to customise 2FA emails sent to my site users. How can I do that?\n</h4>\n<p>\n<p>You can use our custom <a href=\"https://shsec.io/ji\" rel=\"nofollow ugc\">templates for this purpose</a>.</p>\n</p>\n<dt id=\'how%20can%20i%20remove%20the%20wordpress%20admin%20footer%20message%20that%20displays%20my%20ip%20address%3F\'>\nHow can I remove the WordPress admin footer message that displays my IP address?\n</h4>\n<p>\n<p>You can add some custom code to your functions.php exactly as the following:</p>\n<pre><code>add_filter( \'icwp_wpsf_print_admin_ip_footer\', \'__return_false\' );\n</code></pre>\n</p>\n<dt id=\'how%20can%20i%20change%20the%20text%2Fhtml%20in%20the%20plugin%20badge%3F\'>\nHow can I change the text/html in the Plugin Badge?\n</h4>\n<p>\n<p>Use the following filter and return the HTML/Text you wish to display:</p>\n<pre><code>add_filter( \'icwp_shield_plugin_badge_text\', \'your_function_to_return_text\' );\n</code></pre>\n</p>\n<dt id=\'how%20can%20i%20change%20the%20roles%20for%20login%20notification%20emails%3F\'>\nHow can I change the roles for login notification emails?\n</h4>\n<p>\n<p>Use the following filter and return the role in the function:</p>\n<pre><code>add_filter( \'icwp-wpsf-login-notification-email-role\', \'your_function_to_return_role\' );\n</code></pre>\n<p>Possible options are: network_admin, administrator, editor, author, contributor, subscriber</p>\n</p>\n<dt id=\'what%20changes%20go%20into%20each%20shield%20version%3F\'>\nWhat changes go into each Shield version?\n</h4>\n<p>\n<p>The changelog outlines the main changes for each release. We group changes by minor release &#8220;Series&#8221;. Changes in smaller &#8220;point&#8221; releases are highlighted<br />\n using <strong>(.1)</strong> notation.  So for example, version 10.1<strong>.1</strong> will have changelog items appended with <strong>(.1)</strong></p>\n<p>You can view the entire <a href=\"https://shsec.io/shieldwporgfullchangelog\" rel=\"nofollow ugc\">Shield changelog here</a>.</p>\n</p>\n\n\";s:9:\"changelog\";s:548:\"<p>The full Shield Changelog can be viewed from our home page:</p>\n<h4><a href=\"https://shsec.io/shieldwporgfullchangelog\" rel=\"nofollow ugc\">Full Shield Security Changelog</a></h4>\n<p>ShieldPRO delivers exclusive security features to the serious site administrator to maximise site security<br />\nYou&#8217;ll also have direct access to our technical support team.</p>\n<p><a href=\"https://shsec.io/aa\" rel=\"nofollow ugc\">Go Pro</a> or grab the <a href=\"https://shsec.io/shieldfreetrialwporgreadme\" rel=\"nofollow ugc\">free ShieldPRO Trial</a>.</p>\n\";s:11:\"screenshots\";s:1850:\"<ol><li><a href=\"https://ps.w.org/wp-simple-firewall/assets/screenshot-1.png?rev=2095917\"><img src=\"https://ps.w.org/wp-simple-firewall/assets/screenshot-1.png?rev=2095917\" alt=\"A top-level dashboard that shows all the important things you need to know at-a-glance.\"></a><p>A top-level dashboard that shows all the important things you need to know at-a-glance.</p></li><li><a href=\"https://ps.w.org/wp-simple-firewall/assets/screenshot-2.png?rev=2095917\"><img src=\"https://ps.w.org/wp-simple-firewall/assets/screenshot-2.png?rev=2095917\" alt=\"IP Whitelist and Blacklists lets you manage access and blocks on your site with ease.\"></a><p>IP Whitelist and Blacklists lets you manage access and blocks on your site with ease.</p></li><li><a href=\"https://ps.w.org/wp-simple-firewall/assets/screenshot-3.png?rev=2095917\"><img src=\"https://ps.w.org/wp-simple-firewall/assets/screenshot-3.png?rev=2095917\" alt=\"A full audit log lets you see everything that happens on your site and why, and by whom.\"></a><p>A full audit log lets you see everything that happens on your site and why, and by whom.</p></li><li><a href=\"https://ps.w.org/wp-simple-firewall/assets/screenshot-4.png?rev=2095917\"><img src=\"https://ps.w.org/wp-simple-firewall/assets/screenshot-4.png?rev=2095917\" alt=\"Track user sessions and monitor who is logged-into your site and what they&#039;re doing.\"></a><p>Track user sessions and monitor who is logged-into your site and what they\'re doing.</p></li><li><a href=\"https://ps.w.org/wp-simple-firewall/assets/screenshot-5.png?rev=2095917\"><img src=\"https://ps.w.org/wp-simple-firewall/assets/screenshot-5.png?rev=2095917\" alt=\"Simple, clean options pages that let you configure Shield Security and all its options easily.\"></a><p>Simple, clean options pages that let you configure Shield Security and all its options easily.</p></li></ol>\";}s:13:\"download_link\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.2.4.zip\";s:11:\"screenshots\";a:5:{i:1;a:2:{s:3:\"src\";s:71:\"https://ps.w.org/wp-simple-firewall/assets/screenshot-1.png?rev=2095917\";s:7:\"caption\";s:87:\"A top-level dashboard that shows all the important things you need to know at-a-glance.\";}i:2;a:2:{s:3:\"src\";s:71:\"https://ps.w.org/wp-simple-firewall/assets/screenshot-2.png?rev=2095917\";s:7:\"caption\";s:85:\"IP Whitelist and Blacklists lets you manage access and blocks on your site with ease.\";}i:3;a:2:{s:3:\"src\";s:71:\"https://ps.w.org/wp-simple-firewall/assets/screenshot-3.png?rev=2095917\";s:7:\"caption\";s:88:\"A full audit log lets you see everything that happens on your site and why, and by whom.\";}i:4;a:2:{s:3:\"src\";s:71:\"https://ps.w.org/wp-simple-firewall/assets/screenshot-4.png?rev=2095917\";s:7:\"caption\";s:84:\"Track user sessions and monitor who is logged-into your site and what they\'re doing.\";}i:5;a:2:{s:3:\"src\";s:71:\"https://ps.w.org/wp-simple-firewall/assets/screenshot-5.png?rev=2095917\";s:7:\"caption\";s:94:\"Simple, clean options pages that let you configure Shield Security and all its options easily.\";}}s:4:\"tags\";a:5:{s:8:\"firewall\";s:8:\"firewall\";s:16:\"login-protection\";s:16:\"login protection\";s:7:\"malware\";s:7:\"malware\";s:4:\"scan\";s:4:\"scan\";s:25:\"two-factor-authentication\";s:25:\"two factor authentication\";}s:8:\"versions\";a:56:{s:3:\"1.0\";s:65:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.1.0.zip\";s:5:\"1.9.2\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.1.9.2.zip\";s:6:\"10.0.0\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.0.0.zip\";s:6:\"10.0.1\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.0.1.zip\";s:6:\"10.0.2\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.0.2.zip\";s:6:\"10.0.3\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.0.3.zip\";s:6:\"10.1.0\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.1.0.zip\";s:6:\"10.1.1\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.1.1.zip\";s:6:\"10.1.2\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.1.2.zip\";s:6:\"10.1.3\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.1.3.zip\";s:6:\"10.1.4\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.1.4.zip\";s:6:\"10.1.5\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.1.5.zip\";s:6:\"10.1.6\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.1.6.zip\";s:6:\"10.2.0\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.2.0.zip\";s:6:\"10.2.1\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.2.1.zip\";s:6:\"10.2.2\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.2.2.zip\";s:6:\"10.2.3\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.2.3.zip\";s:6:\"10.2.4\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.10.2.4.zip\";s:5:\"2.0.0\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.2.0.0.zip\";s:5:\"2.6.6\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.2.6.6.zip\";s:5:\"3.0.0\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.3.0.0.zip\";s:5:\"3.5.5\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.3.5.5.zip\";s:5:\"4.0.0\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.4.0.0.zip\";s:6:\"4.17.0\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.4.17.0.zip\";s:5:\"5.0.0\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.5.0.0.zip\";s:6:\"5.20.1\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.5.20.1.zip\";s:5:\"6.0.0\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.6.0.0.zip\";s:5:\"6.1.1\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.6.1.1.zip\";s:6:\"6.10.9\";s:68:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.6.10.9.zip\";s:5:\"6.2.2\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.6.2.2.zip\";s:5:\"6.3.3\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.6.3.3.zip\";s:5:\"6.4.4\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.6.4.4.zip\";s:5:\"6.5.0\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.6.5.0.zip\";s:5:\"6.6.8\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.6.6.8.zip\";s:5:\"6.7.2\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.6.7.2.zip\";s:5:\"6.8.2\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.6.8.2.zip\";s:5:\"6.9.4\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.6.9.4.zip\";s:5:\"7.0.0\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.7.0.0.zip\";s:5:\"7.0.4\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.7.0.4.zip\";s:5:\"7.1.2\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.7.1.2.zip\";s:5:\"7.2.3\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.7.2.3.zip\";s:5:\"7.3.2\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.7.3.2.zip\";s:5:\"7.4.2\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.7.4.2.zip\";s:5:\"8.0.0\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.8.0.0.zip\";s:5:\"8.0.2\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.8.0.2.zip\";s:5:\"8.1.1\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.8.1.1.zip\";s:5:\"8.2.3\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.8.2.3.zip\";s:5:\"8.3.0\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.8.3.0.zip\";s:5:\"8.4.4\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.8.4.4.zip\";s:5:\"8.5.7\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.8.5.7.zip\";s:5:\"8.6.3\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.8.6.3.zip\";s:5:\"8.7.0\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.8.7.0.zip\";s:5:\"9.0.4\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.9.0.4.zip\";s:5:\"9.1.0\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.9.1.0.zip\";s:5:\"9.2.1\";s:67:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.9.2.1.zip\";s:5:\"trunk\";s:61:\"https://downloads.wordpress.org/plugin/wp-simple-firewall.zip\";}s:11:\"donate_link\";s:19:\"https://shsec.io/bw\";s:12:\"contributors\";a:0:{}}}', 'yes');
