WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
accelerated-mobile-pages
Published
2024-10-24
Title
AMP for WP – Accelerated Mobile Pages < 1.0.99.2 - Cross-Site Request Forgery to Privilege Escalation
Slug
accelerated-mobile-pages
Published
2024-12-17
Title
AMP for WP – Accelerated Mobile Pages < 1.1.2 - Reflected Cross-Site Scripting
Slug
accelerated-mobile-pages
Published
2026-01-06
Title
AMP for WP – Accelerated Mobile Pages < 1.1.10 - Cross-Site Request Forgery to Comment Submission
Slug
accelerated-mobile-pages
Published
2026-01-08
Title
AMP for WP < 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload
Slug
accelerated-mobile-pages
Published
2026-07-06
Title
AMP for WP < 1.1.13 - Authenticated (Author+) Arbitrary File Write via Role-Based Access Configuration with Local Font Upload
Slug
accelerated-mobile-pages
Published
2026-09-24
Title
AMP for WP < 1.1.17 - Unauthenticated Stored Cross-Site Scripting via Comment Content Regex Transformation
Slug
accelerated-mobile-pages
Published
2026-10-27
Title
AMP for WP < 1.1.18 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute
Slug
accept-authorize-net-payments-using-contact-form-7
Published
2024-12-17
Title
Accept Authorize.NET Payments Using Contact Form 7 < 2.3 - Unauthenticated Information Exposure
Slug
accept-authorize-net-payments-using-contact-form-7
Published
2025-06-27
Title
Accept Authorize.NET Payments Using Contact Form 7 < 2.6 - Unauthenticated Information Exposure
Slug
accept-sagepay-payments-using-contact-form-7
Published
2025-04-07
Title
Accept SagePay Payments Using Contact Form 7 < 2.1 - Unauthenticated Information Exposure
Slug
accept-signups
Published
2014-08-01
Title
Accept Signups 0.1 - XSS
Slug
accept-stripe-payments-using-contact-form-7
Published
2024-12-11
Title
Accept Stripe Payments Using Contact Form 7 < 2.6 - Unauthenticated Information Exposure
Slug
accept-stripe-payments-using-contact-form-7
Published
2025-06-27
Title
Accept Stripe Payments Using Contact Form 7 < 3.1 - Unauthenticated Information Exposure
Slug
accept-stripe-payments-using-contact-form-7
Published
2025-12-11
Title
Accept Stripe Payments Using Contact Form 7 < 3.2 - Reflected Cross-Site Scripting via failure_message
Slug
access-category-password
Published
2024-04-15
Title
Access Category Password <= 1.5.1 - Reflected Cross-Site Scripting
Slug
access-code-feeder
Published
2022-08-25
Title
Access Code Feeder <= 1.0.3 - CSRF
Slug
access-demo-importer
Published
2021-10-06
Title
Access Demo Importer < 1.0.7 - Subscriber+ Arbitrary File Upload
Slug
access-demo-importer
Published
2022-01-24
Title
Access Demo Importer < 1.0.8 - Arbitrary Plugin Activation via CSRF
Slug
access-demo-importer
Published
2022-01-24
Title
Access Demo Importer < 1.0.8 - Data Reset via CSRF
Slug
accessally
Published
2020-01-21
Title
AccessAlly < 3.3.2 - Unauthenticated Arbitrary PHP Code Execution
Slug
accessally
Published
2021-03-26
Title
AccessAlly < 3.5.7 - $_SERVER Superglobal Leakage
Slug
accessibe
Published
2025-02-23
Title
Web Accessibility By accessiBe < 2.6 - Reflected Cross-Site Scripting
Slug
accessibe
Published
2025-10-10
Title
Web Accessibility By accessiBe < 2.11 - Cross-Site Request Forgery
Slug
accessibe
Published
2025-10-27
Title
Web Accessibility By accessiBe < 2.11 - Missing Authorization
Slug
accessibe
Published
2026-02-18
Title
Web Accessibility by accessiBe < 2.12 - Unauthenticated Sensitive Information Exposure