WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
alemha-watermark
Published
2024-05-24
Title
Alemha Watermarker <= 1.3.1 - Author+ Stored XSS
Slug
alert-box-block
Published
2025-02-03
Title
Alert Box Block – Display notice/alerts in the front end < 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
alert-box-block
Published
2025-03-24
Title
Alert Box Block – Display notice/alerts in the front end < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Alert Box Block
Slug
alert-me
Published
2024-11-08
Title
Alert Me! <= 0.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
alex-reservations
Published
2025-01-29
Title
Alex Reservations: Smart Restaurant Booking < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
alex-reservations
Published
2025-11-07
Title
Alex Reservations: Smart Restaurant Booking < 2.2.4 - Authenticated (Admin+) Arbitrary File Upload
Slug
alfie-the-productfeedtool-wp-plugin
Published
2026-03-20
Title
Alfie – Feed Plugin <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'naam' Parameter
Slug
alfie-the-productfeedtool-wp-plugin
Published
2026-05-21
Title
Alfie <= 1.2.1 - Cross-Site Request Forgery to Feed Deletion via 'delete' Parameter
Slug
alfred-click-collect
Published
2023-01-13
Title
alfred24 Click & Collect <= 1.1.7 - Admin+ Stored XSS
Slug
algori-pdf-viewer
Published
2024-11-08
Title
pdf.js < 2.0.943 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
ali2woo-lite
Published
2024-06-18
Title
AliExpress Dropshipping with AliNext Lite < 3.3.7 - Missing Authorization via Several Functions
Slug
ali2woo-lite
Published
2024-06-18
Title
AliExpress Dropshipping with AliNext Lite < 3.3.6 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
ali2woo-lite
Published
2024-06-20
Title
Ali2Woo Lite < 3.4.4 - PHP Object Injection via CSRF
Slug
ali2woo-lite
Published
2024-06-20
Title
Ali2Woo Lite < 3.4.7 - Stored XSS via CSRF
Slug
ali2woo-lite
Published
2024-06-20
Title
Ali2Woo Lite < 3.3.7 - Reflected Cross-Site Scripting
Slug
ali2woo-lite
Published
2024-06-20
Title
Ali2Woo Lite < 3.3.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
ali2woo-lite
Published
2025-03-27
Title
AliNext < 3.5.4 - Open Redirect
Slug
alike
Published
2025-07-17
Title
Alike - WordPress Custom Post Comparison <= 3.0.1 - Reflected Cross-Site Scripting
Slug
alink-tap
Published
2025-05-02
Title
Alink Tap <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
alipay
Published
2014-05-28
Title
Alipay < 3.7.0 'inc.tenpay_notify.php' Cross-Site Scripting (XSS)
Slug
alipay
Published
2021-07-23
Title
Alipay <= 3.7.2 - Authenticated SQL Injection
Slug
alisha-williams
Published
2026-08-06
Title
A.Williams <= 1.3.1 - Unauthenticated PHP Object Injection
Slug
alkubot
Published
2021-06-30
Title
Alkubot < 3.0.0 - Unauthorised AJAX call via CSRF
Slug
all-404-pages-redirect-to-homepage
Published
2024-02-08
Title
All 404 Pages Redirect to Homepage < 2.0 - Unauthenticated Stored Cross-Site Scripting
Slug
all-404-redirect-to-homepage
Published
2021-04-16
Title
All 404 Redirect to Homepage < 1.21 - Authenticated Reflected Cross-Site Scripting (XSS)