WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
amilia-store
Published
2024-10-24
Title
Amilia Store <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
amin-chat-button
Published
2024-12-03
Title
Pulsating Chat Button < 1.4.2 - Stored XSS via CSRF
Slug
amministrazione-aperta
Published
2022-03-23
Title
Amministrazione Aperta < 3.8 - Admin+ LFI
Slug
amministrazione-trasparente
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Slug
amministrazione-trasparente
Published
2021-07-05
Title
Amministrazione Trasparente < 7.1.1 - Cross-Site Request Forgery
Slug
amministrazione-trasparente
Published
2023-10-12
Title
Amministrazione Trasparente < 8.0.5 - Admin+ Stored XSS
Slug
amministrazione-trasparente
Published
2025-08-30
Title
Amministrazione Trasparente < 9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via print_r Function
Slug
amo-team-showcase
Published
2025-02-20
Title
AMO Team Showcase <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via amoteam_skills Shortcode
Slug
amocrm-webform
Published
2025-03-11
Title
amoCRM WebForm <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
amount-left-free-shipping-woocommerce
Published
2025-05-19
Title
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce < 2.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
amount-left-free-shipping-woocommerce
Published
2025-12-30
Title
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce < 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
amp-extensions
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
amp-img-shortcode
Published
2024-10-31
Title
AMP Img Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
amp-plus
Published
2023-11-13
Title
AMP+ Plus <= 3.0 - Reflected Cross Site Scripting
Slug
amp-wp
Published
2023-10-16
Title
AMP WP <= 1.5.15 - Arbitrary Settings Update via CSRF
Slug
ampedsense-adsense-split-tester
Published
2023-10-18
Title
AmpedSense – AdSense Split Tester < 4.69 - Reflected XSS
Slug
amr-cron-manager
Published
2026-01-23
Title
amr cron manager <= 2.3 - Unauthenticated Stored Cross-Site Scripting
Slug
amr-ical-events-list
Published
2023-04-04
Title
Amr Ical Events Lists <= 6.6 - Admin+ Stored XSS
Slug
amr-personalise
Published
2025-01-16
Title
amr personalise <= 2.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
amr-shortcode-any-widget
Published
2023-01-19
Title
Amr Shortcode Any Widget <= 4.0 - Contributor+ Stored XSS
Slug
amr-shortcodes
Published
2024-11-18
Title
amr shortcodes <= 1.7 - Reflected Cross-Site Scripting
Slug
amr-users
Published
2022-04-04
Title
Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting
Slug
amty-thumb-recent-post
Published
2017-11-23
Title
amtyThumb posts 8.1.3 - Unauthenticated Cross-Site Scripting (XSS)
Slug
amtythumb
Published
2022-05-09
Title
amtyThumb <= 4.2.0 - Subscriber+ SQLi
Slug
amz-configurator-core
Published
2025-04-23
Title
Configurator Theme Core <= 1.4.7 - Authenticated (Subscriber+) Privilege Escalation