WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-settings
Published
2025-09-24
Title
Advanced Settings < 3.2.0 - Authenticated (Author+) Arbitrary File Upload
Slug
advanced-social-media-icons
Published
2026-05-11
Title
Advanced Social Media Icons <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'social' Shortcode
Slug
advanced-speed-increaser
Published
2025-04-01
Title
Advanced Speed Increaser <= 2.2.1 - Cross-Site Request Forgery
Slug
advanced-tag-list
Published
2025-04-09
Title
Advanced Tag Lists <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
advanced-testimonial-carousel-for-elementor
Published
2024-04-22
Title
Advanced Testimonial Carousel for Elementor < 3.0.1 - Missing Authorization
Slug
advanced-text-widget
Published
2014-08-01
Title
Advanced Text Widget < 2.0.2 - Cross Site Scripting
Slug
advanced-text-widget
Published
2023-02-28
Title
Advanced Text Widget <= 2.1.2 - Admin+ Stored XSS
Slug
advanced-twenty-seventeen
Published
2026-10-21
Title
Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme
Slug
advanced-typekit
Published
2025-04-02
Title
Advanced Typekit <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
advanced-uploader
Published
2022-04-19
Title
Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload
Slug
advanced-usps-shipping-method
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-video-player-with-analytics
Published
2024-11-08
Title
Advanced Video Player with Analytics <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-visual-elements
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-what-should-we-write-about-next
Published
2024-11-28
Title
Advanced What should we write next about <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
advanced-what-should-we-write-about-next
Published
2024-12-14
Title
Advanced What should we write next about <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
Slug
advanced-woo-labels
Published
2024-06-05
Title
Advanced Woo Labels – Product Labels for WooCommerce < 1.94 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-woo-labels
Published
2024-09-30
Title
Advanced Woo Labels < 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-woo-labels
Published
2025-04-04
Title
Advanced Woo Labels < 2.16 - Contributor+ Stored XSS
Slug
advanced-woo-labels
Published
2026-02-24
Title
Advanced Woo Labels < 2.37 - Authenticated (Contributor+) Remote Code Execution via 'callback' Parameter
Slug
advanced-woo-labels
Published
2026-02-25
Title
Advanced Woo Labels < 2.37 - Authenticated (Admin+) Remote Code Execution
Slug
advanced-woo-labels
Published
2026-07-31
Title
Advanced Woo Labels < 2.49 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_color' Parameter
Slug
advanced-woo-labels
Published
2026-09-30
Title
Advanced Woo Labels – Product Labels & Badges for WooCommerce < 2.52 - Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
advanced-woo-search
Published
2019-05-02
Title
Advanced Woo Search < 1.70 - CSRF & XSS
Slug
advanced-woo-search
Published
2020-04-22
Title
Advanced Woo Search < 2.00 - SQL query leak in ajax search
Slug
advanced-woo-search
Published
2023-05-01
Title
Advanced Woo Search < 2.78 - Admin+ Stored Cross-Site Scripting