WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
anytrack-affiliate-link-manager
Published
2025-04-09
Title
AnyTrack Affiliate Link Manager < 1.5.5 - Missing Authorization
Slug
anyvar
Published
2017-02-20
Title
AnyVar 0.1.1 - Stored Cross-Site Scripting (XSS)
Slug
anywhere-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
anywhere-elementor
Published
2023-05-02
Title
AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure
Slug
anywhere-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
anywhere-elementor
Published
2024-12-04
Title
AnyWhere Elementor < 1.2.12 - Authenticated (Contributor+) Post Disclosure
Slug
anywhere-flash-embed
Published
2023-11-15
Title
Anywhere Flash Embed <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
aoa-downloadable
Published
2025-03-04
Title
Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated SSRF
Slug
aoa-downloadable
Published
2025-03-04
Title
Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated Arbitrary File Download
Slug
aoi-tori
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
aone-sms
Published
2025-07-31
Title
Service Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation
Slug
aone-sms
Published
2025-09-18
Title
Service Finder SMS System <= 2.0.0 - Authentication Bypass
Slug
ap-background
Published
2025-10-02
Title
AP Background 3.8.1 - 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload via advParallaxBackAdminSaveSlider Function
Slug
ap-background
Published
2025-10-02
Title
AP Background <= 3.8.2 - Cross-Site Request Forgery
Slug
ap-background
Published
2025-10-02
Title
AP Background <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ap-companion
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-contact-form
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-custom-testimonial
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-custom-testimonial
Published
2022-01-25
Title
AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting
Slug
ap-custom-testimonial
Published
2022-01-25
Title
AP Custom Testimonial < 1.4.8 - Admin+ SQL Injection
Slug
ap-google-maps
Published
2025-03-24
Title
Arrow Maps <= 1.0.9 - Reflected Cross-Site Scripting
Slug
ap-honeypot
Published
2025-09-05
Title
AP HoneyPot WordPress Plugin <= 1.4 - Cross-Site Request Forgery
Slug
ap-mega-menu
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-mega-menu
Published
2022-02-28
Title
AP Mega Menu < 3.0.8 - Reflected Cross-Site Scripting
Slug
ap-plugin-scripteo
Published
2025-05-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager < 4.89 - Unauthenticated SQL Injection