WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
age-gate
Published
2022-06-10
Title
Age Gate < 2.17.1 - Unauthenticated Stored Cross-Site Scripting
Slug
age-gate
Published
2025-03-19
Title
Age Gate < 3.5.4 - Unauthenticated Local PHP File Inclusion via 'lang'
Slug
age-gate
Published
2025-04-09
Title
Age Gate < 3.6.0 - Missing Authorization
Slug
age-restriction
Published
2025-07-10
Title
Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read/Write
Slug
age-restriction
Published
2025-08-26
Title
Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Download
Slug
age-restriction
Published
2025-10-21
Title
Age Restriction <= 3.0.2 - Subscriber+ Privilege Escalation
Slug
age-verification
Published
2014-08-01
Title
Age Verification <= 0.4 - Open Redirect
Slug
age-verification-screen-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
age-verification-screen-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
agecheckernet
Published
2025-01-18
Title
Age Verification for your checkout page. Verify your customer's identity <= 1.20.0 - Reflected Cross-Site Scripting
Slug
agency-toolkit
Published
2024-12-17
Title
Agency Toolkit < 1.0.24 - Unauthenticated Arbitrary Options Update
Slug
agency-toolkit
Published
2025-04-01
Title
Agency Toolkit < 1.0.25 - Missing Authorization
Slug
agendapress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
agendapress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
agendapress
Published
2024-11-08
Title
AgendaPress – Easily Publish Meeting Agendas and Programs on WordPress <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
agenteasy-properties
Published
2022-11-02
Title
AgentEasy Properties <= 1.0.4 - Admin+ Stored XSS
Slug
aggregator-advanced-settings
Published
2024-10-03
Title
Aggregator Advanced Settings <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
agile-store-locator
Published
2022-09-28
Title
Store Locator < 1.4.6 - Stored XSS via CSRF
Slug
agile-store-locator
Published
2022-12-24
Title
Store Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode
Slug
agile-store-locator
Published
2023-03-20
Title
Store Locator WordPress < 1.4.10 - Editor+ Stored XSS
Slug
agile-store-locator
Published
2023-08-10
Title
Store Locator WordPress < 1.4.13 - Reflected XSS
Slug
agile-store-locator
Published
2023-12-26
Title
Store Locator WordPress < 1.4.15 - Admin+ Arbitrary File Deletion
Slug
agile-store-locator
Published
2025-06-05
Title
Store Locator WordPress < 1.5.3 - Authenticated (Admin+) Arbitrary File Upload
Slug
agile-store-locator
Published
2025-06-05
Title
Store Locator WordPress < 1.5.2 - Authenticated (Administrator+) SQL Injection
Slug
agile-store-locator
Published
2025-12-14
Title
Store Locator WordPress < 1.6.3 - Authenticated (Contributor+) SQL Injection