WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
admin-bookmarks
Published
2025-04-24
Title
Custom Admin-Bar Favorites <= 0.1 - Reflected Cross-Site Scripting
Slug
admin-cleanup
Published
2025-01-16
Title
Admin Cleanup <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
admin-columns-pro
Published
2021-05-31
Title
Admin Columns Free < 4.3 & Pro < 5.5.1 - Admin+ Stored XSS in Label
Slug
admin-columns-pro
Published
2021-05-31
Title
Admin Columns Free (< 4.3.2) & Pro (< 5.5.2) - Authenticated Stored Cross-Site Scripting (XSS) in Custom Field
Slug
admin-custom-login
Published
2017-03-01
Title
Admin Custom Login < 2.4.8 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
admin-custom-login
Published
2021-07-28
Title
Admin Custom Login < 3.2.8 - CSRF to Stored XSS
Slug
admin-dashboard-rss-feed
Published
2024-07-11
Title
Admin Dashboard RSS Feed < 3.4 - Administrator+ Stored XSS
Slug
admin-font-editor
Published
2016-04-13
Title
Admin Font Editor <= 1.8 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
admin-form
Published
2024-05-07
Title
ADFO – Custom data in admin dashboard < 1.9.1 - Cross-Site Request Forgery
Slug
admin-form
Published
2024-05-07
Title
ADFO – Custom data in admin dashboard < 1.9.1 - Reflected Cross-Site Scripting
Slug
admin-form
Published
2025-02-18
Title
ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
admin-form
Published
2025-02-24
Title
ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Admin+) PHP Object Injection
Slug
admin-in-english-with-switch
Published
2025-09-10
Title
Admin in English with Switch <= 1.1 - Cross-Site Request Forgery
Slug
admin-log
Published
2023-03-20
Title
Admin Log <= 1.50 - CSRF
Slug
admin-login-url-change
Published
2026-01-20
Title
Admin login URL Change <= 1.1.5 - Missing Authorization
Slug
admin-management-xtended
Published
2015-12-14
Title
Admin Management Xtended <= 2.4.0 - Privilege Escalation
Slug
admin-management-xtended
Published
2022-05-27
Title
Admin Management Xtended < 2.4.5 - Multiple CSRF
Slug
admin-management-xtended
Published
2022-06-20
Title
Admin Management Xtended < 2.4.5 - Post Visibility/Date/Comment Status Update via CSRF
Slug
admin-management-xtended
Published
2024-10-15
Title
Admin Management Xtended < 2.4.7 - Contributor+ Stored XSS
Slug
admin-management-xtended
Published
2025-10-17
Title
Admin Management Xtended < 2.5.2 - Missing Authorization
Slug
admin-menu
Published
2020-08-10
Title
Admin Menu <= 1.1 - Authenticated Cross-Site Scripting (XSS)
Slug
admin-menu-editor
Published
2025-09-05
Title
Admin Menu Editor < 1.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder Parameter
Slug
admin-menu-groups
Published
2025-08-19
Title
Admin Menu Groups <= 0.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
admin-menu-manager
Published
2025-02-26
Title
Admin Menu Manager <= 1.0.3 - Cross-Site Request Forgery
Slug
admin-menu-organizer
Published
2025-01-16
Title
Admin Menu Organizer <= 1.0.1 - Reflected Cross-Site Scripting