WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
add-to-header
Published
2025-04-17
Title
Add to Header <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
add-twitter-pixel
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
add-user-autocomplete
Published
2026-09-10
Title
Add User Autocomplete < 1.2 - Subscriber+ Privilege Escalation
Slug
add-user-meta
Published
2025-08-14
Title
Add User Meta <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
add-user-role
Published
2022-08-30
Title
Add User Role <= 0.0.1 - Admin+ Stored Cross-Site Scripting
Slug
add-whatsapp-button
Published
2024-11-20
Title
Add Chat App Button < 2.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
add-widget-after-content
Published
2024-10-17
Title
Add Widget After Content < 2.5 - Admin+ Stored XSS
Slug
add-widgets-to-page
Published
2023-11-15
Title
Add Widgets to Page <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
add2fav
Published
2022-08-31
Title
add2fav <= 1.0 - Admin+ Stored Cross-Site Scripting
Slug
addblockblocker
Published
2016-08-01
Title
Adblock Blocker 0.0.1 - Arbitrary File Upload
Slug
addendio
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
addendio
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
addfreespace
Published
2026-05-04
Title
addfreespace <= 0.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Page
Slug
addfreestats
Published
2022-10-31
Title
AFS Analytics <= 4.22 - Admin+ Stored XSS
Slug
addfreestats
Published
2025-06-12
Title
AFS Analytics < 4.22 - Missing Authorization
Slug
addfunc-head-footer-code
Published
2026-04-09
Title
AddFunc Head & Footer Code < 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields
Slug
addfunc-mobile-detect
Published
2025-01-07
Title
AddFunc Mobile Detect <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addi-simple-slider
Published
2025-08-11
Title
Simple Responsive Slider <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addify-abandoned-cart-recovery
Published
2023-07-10
Title
Multiple Plugins from Addify - Multiple CSRF
Slug
addify-checkout-fields-manager
Published
2023-07-10
Title
Multiple Plugins from Addify - Multiple CSRF
Slug
addify-custom-fields-for-woocommerce
Published
2023-07-10
Title
Multiple Plugins from Addify - Multiple CSRF
Slug
addify-custom-fields-for-woocommerce
Published
2026-07-27
Title
Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal
Slug
addify-custom-order-number
Published
2023-07-10
Title
Multiple Plugins from Addify - Multiple CSRF
Slug
addify-custom-registration-forms-builder
Published
2023-07-10
Title
Multiple Plugins from Addify - Multiple CSRF
Slug
addify-free-gifts-woocommerce
Published
2023-07-10
Title
Multiple Plugins from Addify - Multiple CSRF