WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
apexchat
Published
2023-04-18
Title
ApexChat < 1.3.2 - Admin+ Stored XSS
Slug
aphorismus
Published
2024-12-12
Title
Aphorismus <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
api-bearer-auth
Published
2019-09-05
Title
API Bearer Auth < 20190908 - Unauthenticated Reflected XSS
Slug
api-bing-map-2018
Published
2023-10-12
Title
WP Bing Map Pro < 5.0 - CSRF
Slug
api-info-themes-plugins-wp-org
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
api-key-for-google-maps
Published
2022-06-08
Title
API KEY for Google Maps < 1.2.2 - Arbitrary API Key Update via CSRF
Slug
api2cart-bridge-connector
Published
2022-10-28
Title
Api2Cart Bridge Connector < 1.2.0 - Unauthenticated Arbitrary File Upload
Slug
api2cart-bridge-connector
Published
2022-10-28
Title
Api2Cart Bridge Connector < 1.2.0 - Unauthenticated RCE
Slug
apimo
Published
2025-03-31
Title
Apimo Connector <= 2.6.4 - Settings Update via CSRF
Slug
apimo
Published
2026-01-03
Title
Apimo Connector <= 2.6.4 - Missing Authorization
Slug
apk-downloader
Published
2024-11-01
Title
APK Downloader <= 1.0.0 - Cross-Site Request Forgery to Stored Cross Site Scripting
Slug
aplazo-payment-gateway
Published
2026-01-13
Title
Aplazo Payment Gateway <= 1.4.2 - Missing Authorization to Unauthenticated Order Status Manipulation
Slug
apocalypse-meow
Published
2017-12-03
Title
Apocalypse Meow 21.1.3-21.2.7 - BCrypt Authentication Bypass
Slug
apollo13-framework-extensions
Published
2023-11-03
Title
Apollo13 Framework Extensions < 1.9.1 - Contributor+ Stored XSS
Slug
apollo13-framework-extensions
Published
2023-02-24
Title
Apollo13 Framework Extensions < 1.9.0 - Missing Authorization
Slug
apollo13-framework-extensions
Published
2023-12-27
Title
Apollo13 Framework Extensions < 1.9.2 - Cross-Site Request Forgery
Slug
apollo13-framework-extensions
Published
2024-02-05
Title
Apollo13 Framework Extensions < 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
apollo13-framework-extensions
Published
2024-07-04
Title
Apollo13 Framework Extensions < 1.9.4 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
app-ads-txt
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
app-ads-txt
Published
2024-10-24
Title
Ads.txt & App-ads.txt Manager for WordPress < 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
app-builder
Published
2024-04-05
Title
App Builder < 3.8.8 - Open Redirection
Slug
app-builder
Published
2024-04-16
Title
App Builder < 3.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
app-builder
Published
2024-08-20
Title
App Builder – Create Native Android & iOS Apps On The Flight < 4.3.4 - Unauthenticated Limited SQL Injection via app-builder-search
Slug
app-builder
Published
2024-10-24
Title
App Builder – Create Native Android & iOS Apps On The Flight < 5.3.8 - Privilege Escalation and Account Takeover via Weak OTP
Slug
app-builder
Published
2025-06-19
Title
App Builder < 5.5.8 - Missing Authorization