WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
all-404-redirect-to-homepage
Published
2021-06-01
Title
All 404 Redirect to Homepage < 2.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
all-bootstrap-blocks
Published
2023-06-13
Title
All Bootstrap Blocks < 1.3.7 - Cross-Site Request Forgery
Slug
all-bootstrap-blocks
Published
2024-05-10
Title
All Bootstrap Blocks < 1.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
all-bootstrap-blocks
Published
2024-08-16
Title
All Bootstrap Blocks < 1.3.20 - Contributor+ Stored XSS
Slug
all-bootstrap-blocks
Published
2024-12-02
Title
All Bootstrap Blocks < 1.3.20 - Authenticated (Contributor+) Local File Inclusion
Slug
all-bootstrap-blocks
Published
2025-01-29
Title
All Bootstrap Blocks < 1.3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
all-bootstrap-blocks
Published
2025-08-26
Title
All Bootstrap Blocks < 1.3.29 - Missing Authorization
Slug
all-contact-form-integration-for-elementor
Published
2024-04-16
Title
EleForms – All In One Form Integration including DB for Elementor < 2.9.9.8 - Missing Authorization to Sensitive Information Exposure
Slug
all-contact-form-integration-for-elementor
Published
2024-04-16
Title
EleForms – All In One Form Integration including DB for Elementor < 2.9.9.8 - Unauthenticated Stored Cross-Site Scripting
Slug
all-contact-form-integration-for-elementor
Published
2024-07-11
Title
EleForms <= 2.9.9.9 - Missing Authorization
Slug
all-contact-form-integration-for-elementor
Published
2024-11-05
Title
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing Authorization
Slug
all-contact-form-integration-for-elementor
Published
2024-11-15
Title
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Cross-Site Request Forgery
Slug
all-custom-fields-groups
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
all-embed-addons-for-elementor
Published
2025-01-24
Title
All Embed – Elementor Addons < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
all-images-ai
Published
2025-02-11
Title
All-Images.ai – IA Image Bank and Custom Image creation < 1.0.5 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
all-in-menu
Published
2025-02-21
Title
All In Menu <= 1.1.5 - Authenticated (Subscriber+) SQL Injection
Slug
all-in-one-accessibility
Published
2025-12-31
Title
All in One Accessibility < 1.16 - Missing Authorization
Slug
all-in-one-adsense-and-ypn
Published
2014-08-01
Title
All in One Adsense YPN 2.0.1 - all-in-one-adsense-&-ypn.php Unspecified XSS
Slug
all-in-one-adsense-and-ypn
Published
2014-08-01
Title
All in One Adsense YPN 2.0.1 - all-in-one-adsense-&-ypn.php Direct Request AdSense Account Manipulation
Slug
all-in-one-b2b-for-woocommerce
Published
2023-09-04
Title
All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation
Slug
all-in-one-b2b-for-woocommerce
Published
2023-09-04
Title
All in One B2B for WooCommerce <= 1.0.3 - Multiple CSRF
Slug
all-in-one-bannerRotator
Published
2025-09-26
Title
AllInOne - Banner Rotator <= 3.8 - Authenticated (Contributor+) SQL Injection
Slug
all-in-one-bannerRotator
Published
2026-02-26
Title
AllInOne - Banner Rotator <= 3.8 - Reflected Cross-Site Scripting
Slug
all-in-one-bannerWithPlaylist
Published
2025-09-26
Title
LambertGroup - AllInOne - Banner with Playlist <= 3.8 - Authenticated (Contributor+) SQL Injection
Slug
all-in-one-bannerWithPlaylist
Published
2026-02-26
Title
LambertGroup - AllInOne - Banner with Playlist <= 3.8 - Reflected Cross-Site Scripting