WordPress Plugin Vulnerabilities | Page 52 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2025-02-11

Title

All-Images.ai – IA Image Bank and Custom Image creation < 1.0.5 - Authenticated (Subscriber+) Arbitrary File Upload

Slug

Published

2025-02-21

Title

All In Menu <= 1.1.5 - Authenticated (Subscriber+) SQL Injection

Slug

all-in-one-accessibility

Published

2025-12-31

Title

All in One Accessibility < 1.16 - Missing Authorization

Slug

all-in-one-adsense-and-ypn

Published

2014-08-01

Title

All in One Adsense YPN 2.0.1 - all-in-one-adsense-&-ypn.php Unspecified XSS

Slug

all-in-one-adsense-and-ypn

Published

2014-08-01

Title

All in One Adsense YPN 2.0.1 - all-in-one-adsense-&-ypn.php Direct Request AdSense Account Manipulation

Slug

all-in-one-b2b-for-woocommerce

Published

2023-09-04

Title

All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation

Slug

all-in-one-b2b-for-woocommerce

Published

2023-09-04

Title

All in One B2B for WooCommerce <= 1.0.3 - Multiple CSRF

Slug

all-in-one-bannerRotator

Published

2025-09-26

Title

AllInOne - Banner Rotator <= 3.8 - Authenticated (Contributor+) SQL Injection

Slug

all-in-one-bannerWithPlaylist

Published

2025-09-26

Title

LambertGroup - AllInOne - Banner with Playlist <= 3.8 - Authenticated (Contributor+) SQL Injection

Slug

all-in-one-contentSlider

Published

2025-09-26

Title

LambertGroup - AllInOne - Content Slider <= 3.8 - Authenticated (Contributor+) SQL Injection

Slug

all-in-one-cufon

Published

2025-02-24

Title

All-In-One Cufon <= 1.3.0 - Cross-Site Request Forgery

Slug

all-in-one-event-calendar

Published

2014-08-01

Title

All-in-One Event Calendar 1.9 - wp-admin/post-new.php Multiple Parameter XSS

Slug

all-in-one-event-calendar

Published

2014-08-01

Title

All-in-One Event Calendar 1.9 - index.php Multiple Parameter SQL Injection

Slug

all-in-one-event-calendar

Published

2014-09-27

Title

All-in-One Event Calendar Plugin 1.4 & 1.5 Multiple XSS

Slug

all-in-one-event-calendar

Published

2019-05-04

Title

All-in-One Event Calendar <= 2.5.38 - Cross-Site Scripting (XSS)

Slug

all-in-one-facebook-like-widget

Published

2024-04-22

Title

All-in-one Like Widget < 2.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting

Slug

all-in-one-favicon

Published

2018-07-10

Title

All In One Favicon <= 4.6 - Multiple Stored Authenticated XSS

Slug

all-in-one-forms

Published

2025-10-23

Title

AIO Forms < 1.3.19 - Authenticated (Admin+) Arbitrary File Upload via Zip Import

Slug

all-in-one-invite-codes

Published

2022-02-28

Title

Unauthorised AJAX Calls via Freemius

Slug

all-in-one-login

Published

2025-01-16

Title

all-in-one-box-login <= 2.0.1 - Reflected Cross-Site Scripting

Slug

all-in-one-minifier

Published

2025-09-10

Title

All in one Minifier <= 3.2 - Unauthenticated SQL Injection

Slug

all-in-one-music-player

Published

2025-09-29

Title

All in One Music Player <= 1.3.1 - Authenticated (Contributor+) Path Traversal via theme Parameter

Slug

all-in-one-performance-accelerator

Published

2025-02-03

Title

AIO Performance Profiler, Monitor, Optimize, Compress & Debug < 1.3 - Missing Authorization

Slug

all-in-one-performance-accelerator

Published

2025-04-01

Title

AIO Performance Profiler, Monitor, Optimize, Compress & Debug <= 1.3 - Unauthenticated Sensitive Information Exposure

Slug

all-in-one-redirection

Published

2023-06-19

Title

All In One Redirection < 2.2.0 - Admin+ SQLi