WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-cf7-db
Published
2024-06-10
Title
Advanced Contact form 7 DB < 2.0.3 - Missing Authorization to Unauthenticated Information Disclosure
Slug
advanced-cf7-db
Published
2024-06-10
Title
Advanced Contact form 7 DB < 2.0.3 - Sensitive Information Exposure
Slug
advanced-cf7-db
Published
2026-04-08
Title
Advanced CF7 DB < 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export
Slug
advanced-cf7-db
Published
2026-04-08
Title
Advanced CF7 DB < 2.1.0 - Cross-Site Request Forgery to Form Entry Deletion
Slug
advanced-cf7-db
Published
2026-06-30
Title
Advanced Contact form 7 DB < 2.1.0 - Missing Authorization
Slug
advanced-cf7-db
Published
2026-09-09
Title
Advanced Contact form 7 DB <= 2.1.3 - Missing Authorization to Authenticated (Custom+) Unauthorized Data Import via 'import_cf7_id'
Slug
advanced-cf7-db
Published
2026-09-22
Title
Advanced Contact form 7 DB < 2.1.2 - Missing Authorization to Authenticated (Contributor+) Information Disclosure via 'acf7db' Shortcode
Slug
advanced-classifieds-and-directory-pro
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
advanced-classifieds-and-directory-pro
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
advanced-classifieds-and-directory-pro
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-classifieds-and-directory-pro
Published
2024-03-19
Title
Advanced Classifieds & Directory Pro < 3.1.2 - Missing Authorization to Arbitrary Attachment Deletion
Slug
advanced-classifieds-and-directory-pro
Published
2024-07-04
Title
Advanced Classifieds & Directory Pro < 3.2.1 - Authenticated (Contributor+) Local File Inclusion
Slug
advanced-classifieds-and-directory-pro
Published
2025-12-24
Title
Advanced Classifieds & Directory Pro < 3.3.0 - Cross-Site Request Forgery
Slug
advanced-classifieds-and-directory-pro
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
advanced-classifieds-and-directory-pro
Published
2026-08-07
Title
Advanced Classifieds & Directory Pro < 3.4.3 - Unauthenticated Non-Public Listing Custom Field Disclosure
Slug
advanced-classifieds-and-directory-pro
Published
2026-10-09
Title
Advanced Classifieds & Directory Pro < 3.5.0 - Authenticated (Custom+) Stored Cross-Site Scripting via 'phone' Parameter
Slug
advanced-contact-form-7-compact-db
Published
2026-06-23
Title
Advanced Contact Form 7 <= 1.0.0 - Missing Authorization to Unauthenticated Arbitrary Contact Form Submission Deletion via 'form_id' Parameter
Slug
advanced-control-manager
Published
2024-10-31
Title
Advanced Control Manager for WordPress by ItalyStrap <= 2.16.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-control-manager
Published
2024-12-05
Title
Advanced Control Manager for WordPress by ItalyStrap <= 2.16.0 - Reflected Cross-Site Scripting
Slug
advanced-country-blocker
Published
2026-02-06
Title
Advanced Country Blocker <= 2.3.1 - Unauthenticated Authorization Bypass
Slug
advanced-coupons-for-woocommerce-free
Published
2022-11-30
Title
Advanced Coupons for WooCommerce Coupons < 4.5.0.1 - Notice Dismiss via CSRF
Slug
advanced-coupons-for-woocommerce-free
Published
2025-10-16
Title
Advanced Coupons for WooCommerce Coupons < 4.6.9 - Authenticated (Shop manager+) SQL Injection
Slug
advanced-coupons-for-woocommerce-free
Published
2026-03-28
Title
Advanced Coupons for WooCommerce Coupons < 4.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-coupons-for-woocommerce-free
Published
2026-02-06
Title
Advanced Coupons for WooCommerce Coupons < 4.7.1.1 - Missing Authorization
Slug
advanced-cron-manager
Published
2022-01-04
Title
Advanced Cron Manager - Subscriber+ Arbitrary Events/Schedules Creation/Deletion