WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
amazon-link
Published
2022-05-09
Title
Amazon Link <= 3.2.10 - Admin+ Stored Cross-Site Scripting
Slug
amazon-product-in-a-post-plugin
Published
2015-05-07
Title
Amazon Product In a Post Plugin < 3.5.3 - Unauthenticated SQL Injection
Slug
amazon-product-in-a-post-plugin
Published
2025-05-07
Title
Amazon Product in a Post <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
amazon-product-price
Published
2024-12-11
Title
Amazon Product Price <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
amazon-showcase-wordpress-widget
Published
2025-04-17
Title
Amazon Showcase WordPress Plugin <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
amazonify
Published
2023-11-07
Title
Amazonify <= 0.8.1 - Cross-Site Request Forgery to Amazon Tracking ID Update
Slug
amazonify
Published
2023-11-07
Title
Amazonify <= 0.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
amazonjs
Published
2023-01-20
Title
Amazon JS <= 0.10 - Contributor+ Stored XSS
Slug
amazonsimpleadmin
Published
2024-09-09
Title
Affiliate Super Assistent < 1.5.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
amberlink
Published
2025-01-14
Title
Amber <= 1.4.4 - Reflected Cross-Site Scripting
Slug
amcharts-charts-and-maps
Published
2022-08-09
Title
amCharts: Charts and Maps < 1.4.1 - Contributor+ Stored Cross-Site Scripting
Slug
amcharts-charts-and-maps
Published
2024-09-11
Title
amCharts: Charts and Maps < 1.4.5 - Reflected Cross-Site Scripting via Cross-Site Request Forgery
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Reflected Cross-Site Scripting
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Manager+ RCE
Slug
ameliabooking
Published
2022-03-02
Title
Amelia < 1.0.47 - Unauthenticated Stored XSS via lastName
Slug
ameliabooking
Published
2022-03-01
Title
Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure
Slug
ameliabooking
Published
2022-03-14
Title
Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure
Slug
ameliabooking
Published
2022-03-14
Title
Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update
Slug
ameliabooking
Published
2023-04-06
Title
Appointment and Event Booking Calendar for WordPress < 1.0.76 - Reflected XSS
Slug
ameliabooking
Published
2023-12-22
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.86 - Contributor+ Stored XSS
Slug
ameliabooking
Published
2024-01-18
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.94 - Contributor+ Stored Cross-Site Scripting via shortcode
Slug
ameliabooking
Published
2024-01-17
Title
Amelia < 1.0.99 - Missing Authorization
Slug
ameliabooking
Published
2024-02-29
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.99 - Reflected Cross-Site Scripting
Slug
ameliabooking
Published
2024-04-10
Title
Amelia < 1.0.96 - Cross-Site Request Forgery