WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-form-integration
Published
2025-01-03
Title
Advanced Form Integration < 1.97.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
advanced-form-integration
Published
2025-03-03
Title
AFI < 1.100.0 - Admin+ Stored XSS
Slug
advanced-form-integration
Published
2025-03-03
Title
AFI < 1.100.0 - Admin+ Stored XSS
Slug
advanced-form-integration
Published
2026-04-29
Title
AFI – The Easiest Integration Plugin < 1.127.0 - Missing Authorization
Slug
advanced-form-integration
Published
2026-06-10
Title
Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping
Slug
advanced-form-integration
Published
2026-07-27
Title
Advanced Form Integration < 2.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary MailUp OAuth Token Overwrite via auth_redirect() Function
Slug
advanced-form-integration
Published
2026-10-09
Title
Advanced Form Integration < 2.10.0 - Unauthenticated Unverified Password Change to Authentication Bypass / Privilege Escalation via Contact Form 7 Submission to Ultimate Member Update Profile Field Action
Slug
advanced-forms
Published
2020-06-27
Title
Advanced Forms < 1.6.9 - Subscriber+ Arbitrary User Email Address Update via IDOR
Slug
advanced-forms
Published
2024-02-05
Title
Advanced Forms for ACF < 1.9.3.3 - Missing Authorization to Unauthenticated Form Settings Export
Slug
advanced-forms
Published
2026-07-07
Title
Advanced Forms for ACF < 1.9.3.8 - Missing Authorization
Slug
advanced-forms-pro
Published
2020-06-27
Title
Advanced Forms < 1.6.9 - Subscriber+ Arbitrary User Email Address Update via IDOR
Slug
advanced-free-flat-shipping-woocommerce
Published
2023-07-11
Title
Advanced Flat rate shipping Woocommerce < 1.6.4.6 - Cross-Site Request Forgery
Slug
advanced-google-recaptcha
Published
2024-12-23
Title
Advanced Google reCAPTCHA < 1.26 - Brute Force Protection IP Unblock
Slug
advanced-google-recaptcha
Published
2025-02-24
Title
Advanced Google reCaptcha < 1.28 - Built-in Math CAPTCHA Bypass
Slug
advanced-google-recaptcha
Published
2025-03-27
Title
Advanced Google reCAPTCHA < 1.30 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter
Slug
advanced-google-recaptcha
Published
2026-06-05
Title
WP Captcha PRO < 5.39 - Subscriber+ Authentication Bypass via Temporary Login Link
Slug
advanced-google-recaptcha
Published
2026-06-05
Title
WP Captcha PRO < 5.39 - Subscriber+ Arbitrary File Upload
Slug
advanced-google-recaptcha
Published
2026-10-05
Title
Advanced Google reCAPTCHA < 5.41 - Unauthenticated Login Protection Bypass
Slug
advanced-google-universal-analytics
Published
2025-07-28
Title
Advanced Google Universal Analytics <= 1.0.3 - Missing Authorization
Slug
advanced-gutenberg
Published
2025-07-01
Title
Gutenberg Blocks < 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-gutenberg
Published
2025-07-28
Title
Gutenberg Blocks < 3.3.2 - Unauthenticated Local File Inclusion
Slug
advanced-gutenberg
Published
2025-10-24
Title
Gutenberg Blocks – PublishPress Blocks Controls, Visibility, Reusable Blocks < 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2022-02-02
Title
Advanced iFrame < 2022 - Reflected Cross-Site Scripting
Slug
advanced-iframe
Published
2023-11-09
Title
Advanced iFrame < 2023.9 - Contributor+ Stored XSS
Slug
advanced-iframe
Published
2024-01-31
Title
Advanced iFrame < 2024.0 - Contributor+ Stored XSS