WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-access-manager
Published
2014-09-27
Title
Advanced Access Manager 2.8.2 - Admin User File Read/Write
Slug
advanced-access-manager
Published
2016-06-21
Title
Advanced Access Manager <= 3.2.1 - Privilege Escalation
Slug
advanced-access-manager
Published
2019-09-05
Title
Advanced Access Manager < 5.9.9 - Unauthenticated Local File Inclusion
Slug
advanced-access-manager
Published
2020-08-20
Title
Advanced Access Manager < 6.6.2 - Authenticated Authorization Bypass and Privilege Escalation
Slug
advanced-access-manager
Published
2020-08-20
Title
Advanced Access Manager < 6.6.2 - Authenticated Information Disclosure
Slug
advanced-access-manager
Published
2021-10-19
Title
Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site Scripting
Slug
advanced-access-manager
Published
2023-12-26
Title
Advanced Access Manager < 6.9.16 - Contributor+ Stored XSS
Slug
advanced-access-manager
Published
2023-12-27
Title
Advanced Access Manager < 6.9.19 - Contributor+ Stored XSS
Slug
advanced-access-manager
Published
2023-12-27
Title
Advanced Access Manager < 6.9.19 - Open Redirect
Slug
advanced-access-manager
Published
2024-03-16
Title
Advanced Access Manager < 6.9.21 - Admin+ Stored Cross-Site Scripting
Slug
advanced-access-manager
Published
2024-03-20
Title
Advanced Access Manager < 6.9.21 - Reflected XSS
Slug
advanced-accordion-block
Published
2025-04-23
Title
Advanced Accordion Gutenberg Block < 5.0.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
advanced-admin-search
Published
2022-05-17
Title
Advanced Admin Search < 1.1.6 - Reflected Cross-Site Scripting
Slug
advanced-ads
Published
2020-03-18
Title
Advanced Ads < 1.17.4 - Reflected XSS via Admin Dashboard
Slug
advanced-ads
Published
2022-09-27
Title
Advanced Ads < 1.32.0 - Admin+ Stored XSS
Slug
advanced-ads
Published
2024-05-07
Title
Advanced Ads – Ad Manager & AdSense < 1.52.2 - Authenticated (Admin+) PHP Object Injection
Slug
advanced-ads
Published
2024-05-07
Title
Advanced Ads – Ad Manager & AdSense < 1.52.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widget
Slug
advanced-ads
Published
2025-10-31
Title
Advanced Ads < 2.0.13 - Unauthenticated Limited Code Execution
Slug
advanced-ads
Published
2025-12-29
Title
Advanced Ads < 2.0.15 - Editor+ Remote Code Execution via Shortcode
Slug
advanced-ads
Published
2026-01-16
Title
Advanced Ads – Ad Manager & AdSense < 2.0.16 - Authenticated (Admin+) SQL Injection
Slug
advanced-ads
Published
2026-02-18
Title
Advanced Ads – Ad Manager & AdSense < 2.0.15 - Missing Authorization to Authenticated (Subscriber+) Ad Placements Update
Slug
advanced-advertising-system
Published
2024-10-18
Title
Advanced Advertising System <= 1.3.1 - Unauthenticated PHP Object Injection
Slug
advanced-advertising-system
Published
2025-04-07
Title
Advanced Advertising System <= 1.3.1 - Open Redirect
Slug
advanced-ajax-page-loader
Published
2016-07-03
Title
Advanced Ajax Page Loader < 2.7.7 - Unauthenticated Uploaded File Disclosure
Slug
advanced-ajax-page-loader
Published
2024-07-08
Title
Advanced AJAX Page Loader <= 2.7.7 - Cross-Site Request Forgery to Arbitrary File Upload