WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
adthrive-ads
Published
2025-02-18
Title
Raptive Ads < 3.7.1 - Missing Authorization to Unauthenticated Data/Settings Reset
Slug
adthrive-ads
Published
2025-02-18
Title
Raptive Ads < 3.7.1 - Reflected Cross-Site Scripting
Slug
adthrive-ads
Published
2025-04-10
Title
Raptive Ads < 3.7.4 - Reflected Cross-Site Scripting
Slug
adthrive-ads
Published
2025-08-19
Title
Raptive Ads < 3.9.0 - Reflected Cross-Site Scripting
Slug
adthrive-ads
Published
2026-01-14
Title
Raptive Ads <= 3.10.0 - Missing Authorization
Slug
advance-block-extend
Published
2026-02-18
Title
Advance Block Extend <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via TitleColor Block Attribute
Slug
advance-food-menu
Published
2025-08-22
Title
Advance Food Menu <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
advance-menu-manager
Published
2021-07-12
Title
Advanced Menu Manager < 3.0.7 - Unauthorised Menu Creation/Deletion
Slug
advance-menu-manager
Published
2021-07-12
Title
Advanced Menu Manager < 3.0 - Unauthorised Menu Edition via CSRF
Slug
advance-menu-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
advance-menu-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advance-menu-manager
Published
2024-12-11
Title
Advance Menu Manager < 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Slug
advance-portfolio-grid
Published
2025-09-22
Title
Advance Portfolio Grid < 1.07.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
advance-post-prefix
Published
2024-11-20
Title
Advance Post Prefix <= 1.1.1 - Reflected XSS
Slug
advance-post-prefix
Published
2024-11-20
Title
Advance Post Prefix <= 1.1.1 - Reflected XSS
Slug
advance-post-prefix
Published
2024-11-20
Title
Advance Post Prefix <= 1.1.1 - Admin+ SQL Injection
Slug
advance-search
Published
2021-09-09
Title
Advance Search < 1.1.3 - Reflected Cross-Site Scripting
Slug
advance-search
Published
2024-03-25
Title
Advance Search <= 1.1.6 - Shortcode Deletion via CSRF
Slug
advance-search
Published
2024-04-04
Title
WP Advanced Search <= 1.1.6 - Admin+ SQL Injection
Slug
advance-wc-analytics
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
advance-wc-analytics
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advance-wc-analytics
Published
2026-02-05
Title
Advanced WC Analytics <= 3.19.0 - Missing Authorization to Unauthenticated Settings Update
Slug
advance-wp-query-search-filter
Published
2025-04-11
Title
Advance WP Query Search Filter <= 1.0.10 - Reflected Cross-Site Scripting
Slug
advance-wp-query-search-filter
Published
2025-12-09
Title
Advance WP Query Search Filter <= 1.0.10 - Reflected XSS via taxo_ajax
Slug
advance-wp-query-search-filter
Published
2025-12-09
Title
Advance WP Query Search Filter <= 1.0.10 - Reflected XSS via counter