WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
addons-for-elementor
Published
2024-07-03
Title
Elementor Addons by Livemesh < 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid
Slug
addons-for-elementor
Published
2024-07-03
Title
Elementor Addons by Livemesh < 8.4.1 - Authenticated (Contributor+) Limited Local File Inclusion via Widgets
Slug
addons-for-elementor
Published
2024-07-03
Title
Elementor Addons by Livemesh < 8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marquee Text Widget, Testimonials Widget, and Testimonial Slider Widgets
Slug
addons-for-elementor
Published
2024-09-24
Title
Elementor Addons by Livemesh < 8.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via piechart_settings Parameter
Slug
addons-for-elementor
Published
2026-04-15
Title
Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter
Slug
addons-for-elementor
Published
2026-04-15
Title
Livemesh Addons by Elementor <= 9.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Plugin Settings
Slug
addons-for-elementor
Published
2026-02-13
Title
Livemesh Addons for Elementor <= 9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addons-for-elementor-builder
Published
2025-02-14
Title
Vertex Addons for Elementor < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addons-for-elementor-builder
Published
2026-03-23
Title
Vertex Addons for Elementor < 1.7.0 - Missing Authorization
Slug
addons-for-elementor-builder
Published
2026-04-08
Title
Vertex Addons for Elementor < 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation via 'afeb_activate_required_plugins'
Slug
addons-for-visual-composer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
addons-for-visual-composer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
addons-for-visual-composer
Published
2023-12-07
Title
Livemesh Addons for WPBakery Page Builder < 3.6 - Contributor+ Stored XSS
Slug
addons-for-visual-composer
Published
2024-03-13
Title
WPBakery Page Builder Addons by Livemesh < 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
addons-for-visual-composer
Published
2024-03-25
Title
Livemesh Addons for WPBakery Page Builder < 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
addons-for-visual-composer
Published
2024-08-16
Title
Livemesh Addons for WPBakery Page Builder < 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addons-for-visual-composer
Published
2026-01-15
Title
Livemesh Addons for WPBakery Page Builder <= 3.9.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
addons-for-visual-composer
Published
2026-05-26
Title
WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
addons-for-visual-composer
Published
2026-05-26
Title
WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
addons-for-visual-composer
Published
2026-07-02
Title
WPBakery Page Builder Addons by Livemesh <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addonskit-for-elementor
Published
2025-04-01
Title
Directorist AddonsKit for Elementor < 1.1.7 - Contributor+ Stored XSS
Slug
address-bar-ads
Published
2026-02-13
Title
Address Bar Ads <= 1.0.0 - Reflected Cross-Site Scripting
Slug
address-email-and-phone-validation
Published
2022-09-12
Title
PCA Predict <= 1.0.3 - Admin+ Stored Cross-Site Scripting
Slug
addressbook
Published
2024-11-01
Title
Addressbook <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
addthis
Published
2015-06-10
Title
Smart Website Tools by AddThis 4.0.6-5.0.2 - Stored XSS