Stored XSS vulnerability in WordPress Download Plugins and Themes from Dashboard plugin.

The WordPress Download Plugins and Themes from Dashboard plugin, which has 10,000+ active installations, was prone to an unauthenticated stored XSS vulnerability in version 1.5.0 and below.

Vulnerability in the WordPress Delucks SEO plugin actively exploited.

The WordPress DELUCKS SEO plugin version 2.1.7 and below is prone to a vulnerability that is actively exploited by hackers.

Multiple vulnerabilities in WordPress Motors Car Dealer & Classified Ads plugin.

The WordPress Motors Car Dealer & Classified Ads plugin, which has 10,000+ active installations, was prone to multiple vulnerabilities in version 1.4.0 and below.

Unauthenticated options import vulnerability in WordPress Ultimate FAQ plugin.

The WordPress Ultimate FAQ plugin, which has 30,000+ active installations, was prone to an unauthenticated options import vulnerability in version 1.8.24 and below.

Critical vulnerability fixed in WordPress LifterLMS plugin.

The WordPress LifterLMS plugin , which has 9,000+ active installations, fixed a critical vulnerability in version 3.34.5 and earlier.