WPScan
How it works
Pricing
Vulnerabilities
WordPress
Plugins
Themes
Stats
Submit vulnerabilities
For developers
Status
API details
CLI scanner
Contact
Login
Get started
WPScan
How it works
Pricing
Vulnerabilities
WordPress
Plugins
Themes
Stats
Submit vulnerabilities
For developers
Status
API details
CLI scanner
Contact
Login
Get started
WordPress Plugin Vulnerabilities
WP Prayer
2021-06-30
WP Prayer < 1.5.5 - Unauthorised AJAX call via CSRF
Fixed in version 1.5.5
2021-06-08
WP Prayer < 1.6.7 - Arbitrary Plugin Settings Update via CSRF
Fixed in version 1.6.7
2021-05-17
WP Prayer < 1.6.2 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in version 1.6.2