WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
alo-easymail
Published
2016-02-16
Title
ALO EasyMail Newsletter < 2.7.0 - Cross-Site Request Forgery (CSRF)
Slug
alo-easymail
Published
2016-08-01
Title
ALO EasyMail Newsletter <= 2.9.2 - Cross-Site Request Forgery (CSRF)
Slug
alobaidi-captcha
Published
2025-08-14
Title
Alobaidi Captcha <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
Slug
alojapro-widget
Published
2021-07-29
Title
Alojapro Widget < 1.1.16 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
alpack
Published
2025-08-15
Title
Al Pack < 1.1.2 - Missing Authorization to Unauthenticated Premium Feature Activation via check_activate_permission Function
Slug
alpha-blocks
Published
2026-01-23
Title
Alpha Blocks <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alpha_block_css' Post Meta
Slug
alpha-price-table-for-elementor
Published
2025-01-07
Title
Alpha Price Table For Elementor <= 1.2.0 - Contributor+ Stored XSS
Slug
alphabetic-pagination
Published
2022-08-25
Title
Alphabetic Pagination < 3.0.8 - Unauthenticated Arbitrary Option Update
Slug
alphabetic-pagination
Published
2025-02-14
Title
Alphabetic Pagination < 3.2.2 - Reflected Cross-Site Scripting
Slug
alphabetical-list
Published
2024-10-31
Title
Alphabetical List <= 1.0.3 - Settings Update via CSRF
Slug
alphaomega-captcha-anti-spam
Published
2025-03-24
Title
AlphaOmega Captcha & Anti-Spam Filter <= 3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
alpine-photo-tile-for-instagram
Published
2014-08-01
Title
Alpine PhotoTile For Instagram <= 1.2.6.5 - Cross-Site Scripting (XSS)
Slug
alpine-photo-tile-for-instagram
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
alpine-photo-tile-for-instagram
Published
2015-08-20
Title
Alpine PhotoTile for Instagram <= 1.2.7.5 - Authenticated Cross-Site Scripting (XSS)
Slug
alpine-photo-tile-for-instagram
Published
2017-03-01
Title
Alpine PhotoTile - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
alpine-photo-tile-for-pinterest
Published
2022-08-12
Title
Alpine PhotoTile for Pinterest <= 1.3.1 - Admin+ Stored Cross-Site Scripting
Slug
alt-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
alt-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
alt-manager
Published
2023-12-07
Title
Alt Manager < 1.6.2 - Missing Authorization
Slug
alt-manager
Published
2026-03-20
Title
Image Alt Text Manager < 1.8.3 - Authenticated (Author+) Stored Cross-Site Scripting via Post Title
Slug
alt-manager
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
alt-monitoring
Published
2025-05-16
Title
AlT Monitoring <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
alt-report
Published
2025-01-16
Title
AlT Report <= 1.12.0 - Reflected Cross-Site Scripting
Slug
alt-text-generator
Published
2025-11-11
Title
Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images < 1.8.4 - Missing Authorization to Authenticated (Subscriber+) API Key Deletion
Slug
alter
Published
2023-10-26
Title
Alter <= 1.0 - Cross-Site Request Forgery