WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
about-me-3000
Published
2023-06-22
Title
About Me 3000 widget <= 2.2.6 - Administrator Stored Cross-Site Scripting
Slug
about-rentals
Published
2022-08-25
Title
About Rentals <= 1.5 - Unauthenticated Actions
Slug
absolute-addons
Published
2024-11-20
Title
Absolute Addons For Elementor <= 1.0.14 - Authenticated (Contributor+) Local File Inclusion
Slug
absolute-addons
Published
2026-01-05
Title
Absolute Addons For Elementor <= 1.0.14 - Missing Authorization
Slug
absolute-links
Published
2025-04-25
Title
Absolute Links <= 1.1.1 - Authenticated (Administrator+) SQL Injection
Slug
absolute-privacy
Published
2023-08-09
Title
Absolute Privacy <= 2.1 - User Email/Password Change via Cross-Site Request Forgery
Slug
absolute-reviews
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Slug
absolute-reviews
Published
2024-09-26
Title
Absolute Reviews < 1.1.4 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Criteria Name
Slug
abstract-submission
Published
2020-03-24
Title
Multiple plugins - Unauthenticated Dompdf Local File Inclusion (LFI)
Slug
abtest
Published
2014-08-01
Title
ABtest - Directory Traversal
Slug
abtest
Published
2016-03-21
Title
ABtest - File Inclusion
Slug
abundatrade-plugin
Published
2025-05-02
Title
Abundatrade Plugin <= 1.8.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
abwp-simple-counter
Published
2023-12-19
Title
Simple Counter <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
academist-core
Published
2026-10-20
Title
Academist Core <= 1.4.1 - Unauthenticated Local File Inclusion
Slug
academist-membership
Published
2025-02-28
Title
Academist Membership < 1.2 - Authentication Bypass
Slug
academy
Published
2024-02-21
Title
Academy LMS – eLearning and online course solution for WordPress < 1.9.20 - Authenticated (Subscriber+) Privilege Escalation
Slug
academy
Published
2024-04-22
Title
Academy LMS < 1.9.17 - Missing Authorization
Slug
academy
Published
2024-04-29
Title
Academy LMS < 1.9.17 - Missing Authorization
Slug
academy
Published
2024-05-10
Title
Academy LMS < 1.9.26 - Unauthenticated Sensitive Information Exposure
Slug
academy
Published
2024-06-21
Title
Academy LMS < 2.0.11 - Open Redirect
Slug
academy
Published
2024-07-11
Title
Academy LMS < 2.0.5 - Missing Authorization
Slug
academy
Published
2025-09-22
Title
Academy LMS < 3.3.5 - Authenticated (Academy Instructor+) Insecure Direct Object Reference
Slug
academy
Published
2025-11-07
Title
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution < 3.3.9 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses'
Slug
academy
Published
2025-12-30
Title
Academy LMS < 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
academy
Published
2026-01-20
Title
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution < 3.5.1 - Unauthenticated Privilege Escalation via Account Takeover