WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-xml-reader
Published
2014-08-01
Title
Advanced XML Reader 0.3.4 - XML External Entity (XXE) Injection
Slug
advanced-xml-reader
Published
2014-08-01
Title
Advanced XML Reader 0.1.1 - XML External Entity (XXE) Data Parsing Arbitrary File Disclosure
Slug
advanced-youtube-channel-pagination
Published
2023-04-24
Title
Advanced Youtube Channel Pagination <= 1.0 - Reflected XSS
Slug
adventure-bucket-list
Published
2024-11-08
Title
Adventure Bucket List <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advertising-management
Published
2025-01-03
Title
Wp advertising management <= 1.0.3 - Reflected Cross-Site Scripting
Slug
advertizer
Published
2014-08-01
Title
Advertizer <= 1.0 - SQL Injection
Slug
adverts-click-tracker
Published
2025-04-01
Title
WordPress Adverts Plugin <= 1.4 - Missing Authorization
Slug
adverts-click-tracker
Published
2025-09-22
Title
Adverts <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
adwords-conversion-tracking-code
Published
2025-12-31
Title
AdWords Conversion Tracking Code <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
adwork-media-ez-content-locker
Published
2024-12-17
Title
AdWork Media EZ Content Locker <= 3.0 - Reflected Cross-Site Scripting
Slug
aec-kiosque
Published
2025-03-27
Title
AEC Kiosque < 1.9.4 - Reflected Cross-Site Scripting
Slug
aeropage-sync-for-airtable
Published
2025-04-25
Title
Aeropage Sync for Airtable < 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
aeropage-sync-for-airtable
Published
2025-04-25
Title
Aeropage Sync for Airtable < 3.3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Slug
aeroscroll-gallery
Published
2025-06-09
Title
Aeroscroll Gallery <= 1.0.13 - Unauthenticated Directory Traversal
Slug
aesop-story-engine
Published
2024-03-29
Title
Aesop Story Engine <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
af-companion
Published
2021-12-27
Title
AF Companion 1.1.0 - 1.1.2 - Arbitrary Plugin Installation & Activation via CSRF
Slug
af-tell-a-friend
Published
2025-04-09
Title
AF Tell a Friend <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
affieasy
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
affieasy
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
affieasy
Published
2024-04-12
Title
AffiEasy < 1.1.6 - Cross-Site Request Forgery
Slug
affieasy
Published
2024-05-29
Title
AffiEasy < 1.1.7 - Cross-Site Request Forgery to Various Actions
Slug
affiliate-ads-builder-for-clickbank-products
Published
2017-11-14
Title
Affiliate Ads for Clickbank Products <= 1.6 - Stored Cross-Site Scripting (XSS)
Slug
affiliate-advantage
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
affiliate-ai-lite
Published
2025-11-20
Title
Affiliate AI Lite < 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
affiliate-coupons
Published
2025-02-23
Title
Affiliate Coupons < 1.7.4 - Authenticated (Contributor+) Local File Inclusion