WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
automatic-pages-for-privacy-policy-terms-about-and-contact
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
automatic-post-categories
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
automatic-post-categories
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
automatic-thumbnail
Published
2026-05-26
Title
Auto Thumbnails <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
automatic-translation
Published
2024-10-25
Title
Automatic Translation <= 1.0.4 - Unauthenticated Arbitrary File Upload
Slug
automatic-translations-for-polylang
Published
2026-10-09
Title
AutoPoly – AI Translation For Polylang < 1.6.3 - Missing Authorization
Slug
automatic-user-roles-switcher
Published
2022-10-10
Title
Automatic User Roles Switcher < 1.1.2 - Subscriber+ Privilege Escalation
Slug
automatic-youtube-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
automatic-youtube-gallery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
automatic-youtube-gallery
Published
2023-09-05
Title
Automatic YouTube Gallery < 2.3.5 - Missing Authorization via AJAX actions
Slug
automatic-youtube-gallery
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
automatic-youtube-video-posts
Published
2023-11-29
Title
Automatic Youtube Video Posts Plugin <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
automatically-hierarchic-categories-in-menu
Published
2024-09-30
Title
Automatically Hierarchic Categories in Menu < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
automatically-hierarchic-categories-in-menu
Published
2025-01-30
Title
Automatically Hierarchic Categories in Menu < 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
automatically-hierarchic-categories-in-menu
Published
2025-06-19
Title
Automatically Hierarchic Categories in Menu < 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
automaticcss-plugin
Published
2026-09-25
Title
Automatic.css 4.0.0 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI
Slug
automation-web-platform
Published
2024-11-19
Title
Wawp < 3.0.18 - Unauthenticated Privilege Escalation
Slug
automation-web-platform
Published
2025-12-31
Title
Wawp < 4.5 - Missing Authorization
Slug
automation-web-platform
Published
2026-08-20
Title
Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure
Slug
automation-web-platform
Published
2026-09-24
Title
Automation Web Platform < 4.8.7 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter
Slug
automatorwp
Published
2021-09-28
Title
AutomatorWP < 1.7.6 - Missing Authorization and Privilege Escalation
Slug
automatorwp
Published
2023-01-20
Title
AutomatorWP < 2.5.1 - Object Deletion via CSRF
Slug
automatorwp
Published
2024-12-18
Title
AutomatorWP < 5.1.0 - Reflected Cross-Site Scripting via a-0-o-search_field_value
Slug
automatorwp
Published
2025-05-19
Title
AutomatorWP < 5.2.2 - Authenticated (Administrator+) SQL Injection
Slug
automatorwp
Published
2025-06-13
Title
AutomatorWP < 5.2.6 - Authenticated (Administrator+) SQL Injection via field_conditions