WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advance-wc-analytics
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
advance-wp-query-search-filter
Published
2025-04-11
Title
Advance WP Query Search Filter <= 1.0.10 - Reflected Cross-Site Scripting
Slug
advance-wp-query-search-filter
Published
2025-12-09
Title
Advance WP Query Search Filter <= 1.0.10 - Reflected XSS via taxo_ajax
Slug
advance-wp-query-search-filter
Published
2025-12-09
Title
Advance WP Query Search Filter <= 1.0.10 - Reflected XSS via counter
Slug
advanced-access-manager
Published
2014-09-27
Title
Advanced Access Manager 2.8.2 - Admin User File Read/Write
Slug
advanced-access-manager
Published
2016-06-21
Title
Advanced Access Manager <= 3.2.1 - Privilege Escalation
Slug
advanced-access-manager
Published
2019-09-05
Title
Advanced Access Manager < 5.9.9 - Unauthenticated Local File Inclusion
Slug
advanced-access-manager
Published
2020-08-20
Title
Advanced Access Manager < 6.6.2 - Authenticated Authorization Bypass and Privilege Escalation
Slug
advanced-access-manager
Published
2020-08-20
Title
Advanced Access Manager < 6.6.2 - Authenticated Information Disclosure
Slug
advanced-access-manager
Published
2021-10-19
Title
Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site Scripting
Slug
advanced-access-manager
Published
2023-12-26
Title
Advanced Access Manager < 6.9.16 - Contributor+ Stored XSS
Slug
advanced-access-manager
Published
2023-12-27
Title
Advanced Access Manager < 6.9.19 - Contributor+ Stored XSS
Slug
advanced-access-manager
Published
2023-12-27
Title
Advanced Access Manager < 6.9.19 - Open Redirect
Slug
advanced-access-manager
Published
2024-03-16
Title
Advanced Access Manager < 6.9.21 - Admin+ Stored Cross-Site Scripting
Slug
advanced-access-manager
Published
2024-03-20
Title
Advanced Access Manager < 6.9.21 - Reflected XSS
Slug
advanced-accordion-block
Published
2025-04-23
Title
Advanced Accordion Gutenberg Block < 5.0.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
advanced-admin-search
Published
2022-05-17
Title
Advanced Admin Search < 1.1.6 - Reflected Cross-Site Scripting
Slug
advanced-ads
Published
2020-03-18
Title
Advanced Ads < 1.17.4 - Reflected XSS via Admin Dashboard
Slug
advanced-ads
Published
2022-09-27
Title
Advanced Ads < 1.32.0 - Admin+ Stored XSS
Slug
advanced-ads
Published
2024-05-07
Title
Advanced Ads – Ad Manager & AdSense < 1.52.2 - Authenticated (Admin+) PHP Object Injection
Slug
advanced-ads
Published
2024-05-07
Title
Advanced Ads – Ad Manager & AdSense < 1.52.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widget
Slug
advanced-ads
Published
2025-10-31
Title
Advanced Ads < 2.0.13 - Unauthenticated Limited Code Execution
Slug
advanced-ads
Published
2025-12-29
Title
Advanced Ads < 2.0.15 - Editor+ Remote Code Execution via Shortcode
Slug
advanced-ads
Published
2026-01-16
Title
Advanced Ads – Ad Manager & AdSense < 2.0.16 - Authenticated (Admin+) SQL Injection
Slug
advanced-ads
Published
2026-02-18
Title
Advanced Ads – Ad Manager & AdSense < 2.0.15 - Missing Authorization to Authenticated (Subscriber+) Ad Placements Update