WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
add-custom-page-template
Published
2025-04-25
Title
Add custom page template <= 2.0.1 - Authenticated (Administrator+) PHP Code Injection to Remote Code Execution
Slug
add-customer-for-woocommerce
Published
2024-02-01
Title
Add Customer for WooCommerce < 1.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
add-edit-delete-listing-for-member-module
Published
2017-07-05
Title
Add Edit Delete Listing For Member Module <= 1.0 - SQL Injection
Slug
add-expires-headers
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
add-expires-headers
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
add-facebook
Published
2023-11-06
Title
Social Feed <= 1.5.4.6 - Author+ Stored XSS
Slug
add-facebook
Published
2023-11-03
Title
Social Feed | All social media in one place <= 1.5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting]
Slug
add-fields-to-checkout-page-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
add-fields-to-checkout-page-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
add-fields-to-checkout-page-woocommerce
Published
2024-03-22
Title
Custom WooCommerce Checkout Fields Editor < 1.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
add-fields-to-checkout-page-woocommerce
Published
2024-03-28
Title
Custom WooCommerce Checkout Fields Editor < 1.3.1 - Cross-Site Request Forgery
Slug
add-fields-to-checkout-page-woocommerce
Published
2024-04-30
Title
Custom WooCommerce Checkout Fields Editor < 1.3.2 - Missing Authorization
Slug
add-fields-to-checkout-page-woocommerce
Published
2025-09-05
Title
Custom WooCommerce Checkout Fields Editor <= 1.3.4 - Cross-Site Request Forgery
Slug
add-from-server
Published
2016-08-08
Title
Add From Server < 3.3.2 - Cross-Site Request Forgery (CSRF)
Slug
add-from-server
Published
2020-08-11
Title
Add From Server <= 3.3.3 - Authenticated Path Traversal to Arbitrary File Access
Slug
add-google-plus-one-social-share-button
Published
2025-04-24
Title
Add Google +1 (Plus one) social share Button <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
add-hierarchy-parent-to-post
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
add-image-to-post
Published
2024-12-12
Title
Add image to Post <= 0.6 - Cross-Site Request Forgery
Slug
add-infos-to-the-events-calendar
Published
2024-12-11
Title
Add infos to the events calendar < 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
add-instagram
Published
2023-07-07
Title
Image Social Feed <= 1.7.6 - Admin+ Stored XSS
Slug
add-link-to-facebook
Published
2015-03-09
Title
Add Link To Facebook <= 1.215 - Cross Site Scripting (XSS)
Slug
add-link-to-facebook
Published
2015-11-22
Title
Add Link to Facebook <= 2.2.7 - Authenticated Cross-Site Scripting (XSS)
Slug
add-link-to-facebook
Published
2018-11-14
Title
Add Link To Facebook <= 2.3 - Cross-Site Scripting (XSS)
Slug
add-linked-images-to-gallery-v01
Published
2025-02-24
Title
Add Linked Images To Gallery <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
add-local-avatar
Published
2023-11-07
Title
Add Local Avatar <= 12.1 - Cross-Site Request Forgery via manage_avatar_cache