WordPress Plugin Vulnerabilities | Page 70 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

all-in-one-video-gallery

Published

2026-01-23

Title

All-in-One Video Gallery 4.1.0 - 4.6.4 - Missing Authorization to Authenticated (Subscriber+) Limited User Meta Update

Slug

all-in-one-video-gallery

Published

2026-03-03

Title

All-in-One Video Gallery < 4.7.5 - Reflected Cross-Site Scripting via 'vi' Parameter

Slug

all-in-one-video-gallery

Published

2026-07-09

Title

All-in-One Video Gallery < 4.9.0 - Authenticated (Subscriber+) Server-Side Request Forgery via 'vdl' Parameter

Slug

all-in-one-video-gallery

Published

2026-08-07

Title

All-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' Parameter

Slug

all-in-one-video-gallery

Published

2026-10-27

Title

All-in-One Video Gallery < 5.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more_link' Shortcode Attribute

Slug

all-in-one-video-gallery

Published

2026-10-22

Title

All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos < 5.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Slug

all-in-one-video-gallery

Published

2026-10-27

Title

All-in-One Video Gallery < 5.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'embedcode' Post Meta via XML-RPC

Slug

all-in-one-video-gallery

Published

2026-10-29

Title

All-in-One Video Gallery < 5.0.0 - Unauthenticated Private and Draft Video Disclosure

Slug

all-in-one-webmaster

Published

2014-08-01

Title

All in one webmaster 8.2.3 - Script Insertion CSRF

Slug

all-in-one-wp-builder

Published

2025-06-18

Title

AIO WP Builder <= 2.0.2 - Missing Authorization

Slug

all-in-one-wp-migration

Published

2015-03-19

Title

All-in-One WP Migration < 2.0.5 - Unauthenticated Database Export

Slug

all-in-one-wp-migration

Published

2017-06-20

Title

All-in-One WP Migration < 6.46 - Reflected Cross-Site Scripting (XSS)

Slug

all-in-one-wp-migration

Published

2019-07-17

Title

All-in-One WP Migration < 7.0 - Admin+ Stored XSS

Slug

all-in-one-wp-migration

Published

2020-03-25

Title

All-in-One WP Migration < 7.15 - Arbitrary Backup Download

Slug

all-in-one-wp-migration

Published

2022-02-07

Title

All-in-One WP Migration < 7.41 - Admin+ Arbitrary File Upload to RCE

Slug

all-in-one-wp-migration

Published

2022-04-28

Title

All-in-One WP Migration < 7.59 - Admin+ File Deletion on Windows Hosts via Path Traversal

Slug

all-in-one-wp-migration

Published

2022-08-23

Title

All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS

Slug

all-in-one-wp-migration

Published

2024-10-21

Title

All-in-One WP Migration and Backup < 7.87 - Unauthenticated Information Disclosure via Error Logs

Slug

all-in-one-wp-migration

Published

2024-10-27

Title

All-in-One WP Migration and Backup < 7.87 - Authenticated (Administrator+) Arbitrary PHP Code Injection

Slug

all-in-one-wp-migration

Published

2025-03-12

Title

All in One WP Migration < 7.90 - Unauthenticated PHP Object Injection

Slug

all-in-one-wp-migration

Published

2025-08-26

Title

All-in-One WP Migration and Backup < 7.98 - Admin+ Stored XSS

Slug

all-in-one-wp-migration

Published

2026-06-29

Title

All-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path Traversal

Slug

all-in-one-wp-migration

Published

2026-08-14

Title

All-in-One WP Migration and Backup < 7.108 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via REST Import

Slug

all-in-one-wp-migration

Published

2026-08-24

Title

All-in-One WP Migration and Backup < 7.110 - Unauthenticated Second-Order SQLi via Archive Restore to RCE

Slug

all-in-one-wp-migration

Published

2026-09-16

Title

All-in-One WP Migration and Backup < 7.111 - Unauthenticated Basic Auth Credential Capture and Overwrite via Authorization Header