WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
awesome-support
Published
2023-12-07
Title
Awesome Support < 6.1.8 - Missing Authorization
Slug
awesome-support
Published
2023-12-27
Title
Awesome Support < 6.1.6 - Missing Authorization via wpas_load_reply_history
Slug
awesome-support
Published
2023-12-27
Title
Awesome Support < 6.1.6 - Cross-Site Request Forgery
Slug
awesome-support
Published
2024-02-09
Title
Awesome Support – WordPress HelpDesk & Support Plugin < 6.1.8 - Missing Authorization via wpas_get_users()
Slug
awesome-support
Published
2024-02-09
Title
Awesome Support – WordPress HelpDesk & Support Plugin < 6.1.8 - Authenticated (Subscriber+) SQL Injection
Slug
awesome-support
Published
2024-02-09
Title
Awesome Support – WordPress HelpDesk & Support Plugin < 6.1.8 - Missing Authorization via editor_html()
Slug
awesome-support
Published
2024-03-12
Title
Awesome Support < 6.1.7 - Insufficient Authorization via wpas_can_delete_attachments()
Slug
awesome-support
Published
2024-03-29
Title
Awesome Support < 6.1.8 - Missing Authorization
Slug
awesome-support
Published
2024-12-11
Title
Awesome Support < 6.3.2 - Missing Authorization
Slug
awesome-support
Published
2025-03-31
Title
Awesome Support – WordPress HelpDesk & Support Plugin < 6.3.2 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
awesome-support
Published
2025-08-14
Title
Awesome Support < 6.3.7 - Information Exposure
Slug
awesome-support
Published
2025-09-22
Title
Awesome Support < 6.3.6 - Authenticated (Support Manager+) PHP Object Injection
Slug
awesome-support
Published
2026-01-15
Title
Awesome Support – WordPress HelpDesk & Support Plugin < 6.3.7 - Missing Authorization to Unauthenticated Role Demotion
Slug
awesome-support
Published
2026-04-07
Title
Awesome Support < 6.3.8 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter
Slug
awesome-surveys
Published
2025-03-11
Title
Awesome Surveys <= 2.0.10 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
awesome-testimonials
Published
2025-10-07
Title
Awesome Testimonials <= 2.2.1 - Cross-Site Request Forgery
Slug
awesome-timeline
Published
2025-01-16
Title
Awesome WordPress Timeline Plugin <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
awesome-tool-tip
Published
2024-11-08
Title
Awesome Tool Tip <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
awesome-twitter-feeds
Published
2025-01-16
Title
Awesome Twitter Feeds <= 1.0 - Reflected Cross-Site Scripting
Slug
awesome-weather
Published
2021-06-28
Title
Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting (XSS)
Slug
awesome-weather
Published
2023-09-13
Title
Awesome Weather Widget for WordPress <= 3.0.2 - Contributor+ Stored XSS
Slug
awesome-wp-image-gallery
Published
2025-04-24
Title
Awesome Wp Image Gallery <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
awesome-wp-image-gallery
Published
2025-07-02
Title
prettyPhoto JavaScript Library <= 3.1.6 - Contributor+ Stored XSS
Slug
awesomepress
Published
2024-10-31
Title
AwesomePress <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
awin-advertiser-tracking
Published
2025-05-07
Title
Awin – Advertiser Tracking for WooCommerce < 2.0.1 - Product Feed Generation via CSRF