WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

WPQA Builder

2022-08-01
WPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR
Fixed in version 5.7
2022-05-16
WPQA < 5.5 - Unauthenticated Private Message Disclosure
Fixed in version 5.5
2022-05-10
WPQA < 5.4 - Reflected Cross-Site Scripting
Fixed in version 5.4
2022-04-21
WPQA < 5.2 - Subscriber+ Private Message Disclosure via IDOR
Fixed in version 5.2
2022-04-21
WPQA < 5.2 - Subscriber+ Arbitrary Profile Picture Deletion via IDOR
Fixed in version 5.2
2022-04-21
WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields
Fixed in version 5.2