WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advance-portfolio-grid
Published
2025-09-22
Title
Advance Portfolio Grid < 1.07.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
advance-post-prefix
Published
2024-11-20
Title
Advance Post Prefix <= 1.1.1 - Reflected XSS
Slug
advance-post-prefix
Published
2024-11-20
Title
Advance Post Prefix <= 1.1.1 - Reflected XSS
Slug
advance-post-prefix
Published
2024-11-20
Title
Advance Post Prefix <= 1.1.1 - Admin+ SQL Injection
Slug
advance-search
Published
2021-09-09
Title
Advance Search < 1.1.3 - Reflected Cross-Site Scripting
Slug
advance-search
Published
2024-03-25
Title
Advance Search <= 1.1.6 - Shortcode Deletion via CSRF
Slug
advance-search
Published
2024-04-04
Title
WP Advanced Search <= 1.1.6 - Admin+ SQL Injection
Slug
advance-wc-analytics
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
advance-wc-analytics
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advance-wc-analytics
Published
2026-02-05
Title
Advanced WC Analytics < 4.0.0 - Missing Authorization to Unauthenticated Settings Update
Slug
advance-wc-analytics
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
advance-wp-query-search-filter
Published
2025-04-11
Title
Advance WP Query Search Filter <= 1.0.10 - Reflected Cross-Site Scripting
Slug
advance-wp-query-search-filter
Published
2025-12-09
Title
Advance WP Query Search Filter <= 1.0.10 - Reflected XSS via taxo_ajax
Slug
advance-wp-query-search-filter
Published
2025-12-09
Title
Advance WP Query Search Filter <= 1.0.10 - Reflected XSS via counter
Slug
advanced-301-and-302-redirect
Published
2026-06-08
Title
Advanced 301 and 302 Redirect < 1.7.0 - Unauthenticated SQL Injection
Slug
advanced-access-manager
Published
2014-09-27
Title
Advanced Access Manager 2.8.2 - Admin User File Read/Write
Slug
advanced-access-manager
Published
2016-06-21
Title
Advanced Access Manager <= 3.2.1 - Privilege Escalation
Slug
advanced-access-manager
Published
2019-09-05
Title
Advanced Access Manager < 5.9.9 - Unauthenticated Local File Inclusion
Slug
advanced-access-manager
Published
2020-08-20
Title
Advanced Access Manager < 6.6.2 - Authenticated Authorization Bypass and Privilege Escalation
Slug
advanced-access-manager
Published
2020-08-20
Title
Advanced Access Manager < 6.6.2 - Authenticated Information Disclosure
Slug
advanced-access-manager
Published
2021-10-19
Title
Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site Scripting
Slug
advanced-access-manager
Published
2023-12-26
Title
Advanced Access Manager < 6.9.16 - Contributor+ Stored XSS
Slug
advanced-access-manager
Published
2023-12-27
Title
Advanced Access Manager < 6.9.19 - Contributor+ Stored XSS
Slug
advanced-access-manager
Published
2023-12-27
Title
Advanced Access Manager < 6.9.19 - Open Redirect
Slug
advanced-access-manager
Published
2024-03-16
Title
Advanced Access Manager < 6.9.21 - Admin+ Stored Cross-Site Scripting