WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
akismet-htaccess-writer
Published
2024-10-15
Title
Akismet htaccess writer <= 1.0.1 - Reflected Cross-Site Scripting
Slug
akismet-privacy-policies
Published
2022-03-07
Title
Akismet Privacy Policies <= 2.0.1- Reflected Cross-Site Scripting
Slug
aklamator-infeed
Published
2024-12-19
Title
aklamator-infeed <= 2.0.0 - Admin+ Stored XSS
Slug
aklamator-infeed
Published
2024-12-19
Title
aklamator-infeed <= 2.0.0 - Reflected XSS
Slug
albo-pretorio-on-line
Published
2015-07-02
Title
Albo Pretorio Online <= 3.2 - Multiple Vulnerabilities
Slug
albo-pretorio-on-line
Published
2023-04-03
Title
Albo Pretorio Online < 4.6.2 - Reflected XSS
Slug
albo-pretorio-on-line
Published
2023-03-27
Title
Albo Pretorio Online < 4.6.1 - Reflected XSS
Slug
albo-pretorio-on-line
Published
2023-05-03
Title
Albo Pretorio Online < 4.6.4 - Reflected XSS
Slug
albo-pretorio-on-line
Published
2024-01-17
Title
Albo Pretorio Online <= 4.6.6 - Unauthenticated Sensitive Information Disclosure
Slug
albo-pretorio-on-line
Published
2024-01-17
Title
Albo Pretorio Online <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
album-and-image-gallery-plus-lightbox
Published
2024-06-05
Title
Album and Image Gallery plus Lightbox < 2.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
albumreviewer
Published
2025-02-02
Title
Album Reviewer <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting
Slug
alchemist-ajax-upload
Published
2026-01-23
Title
Alchemist Ajax Upload <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Media File Deletion
Slug
ald-login-page
Published
2025-04-09
Title
ALD Login Page < 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
alemha-watermark
Published
2024-05-24
Title
Alemha Watermarker <= 1.3.1 - Author+ Stored XSS
Slug
alert-box-block
Published
2025-02-03
Title
Alert Box Block – Display notice/alerts in the front end < 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
alert-box-block
Published
2025-03-24
Title
Alert Box Block – Display notice/alerts in the front end < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Alert Box Block
Slug
alert-me
Published
2024-11-08
Title
Alert Me! <= 0.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
alex-reservations
Published
2025-01-29
Title
Alex Reservations: Smart Restaurant Booking < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
alex-reservations
Published
2025-11-07
Title
Alex Reservations: Smart Restaurant Booking < 2.2.4 - Authenticated (Admin+) Arbitrary File Upload
Slug
alfred-click-collect
Published
2023-01-13
Title
alfred24 Click & Collect <= 1.1.7 - Admin+ Stored XSS
Slug
algori-pdf-viewer
Published
2024-11-08
Title
pdf.js < 2.0.943 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
ali2woo-lite
Published
2024-06-18
Title
AliExpress Dropshipping with AliNext Lite < 3.3.7 - Missing Authorization via Several Functions
Slug
ali2woo-lite
Published
2024-06-18
Title
AliExpress Dropshipping with AliNext Lite < 3.3.6 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
ali2woo-lite
Published
2024-06-20
Title
Ali2Woo Lite < 3.4.4 - PHP Object Injection via CSRF