WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
apppresser
Published
2024-04-22
Title
AppPresser < 4.3.1 - Missing Authorization
Slug
apppresser
Published
2024-05-28
Title
AppPresser < 4.4.0 - Improper Missing Encryption Exception Handling to Authentication Bypass
Slug
apppresser
Published
2024-10-15
Title
AppPresser < 4.4.5 - Privilege Escalation and Account Takeover via Weak OTP
Slug
apppresser
Published
2024-11-25
Title
AppPresser < 4.4.7 - Unauthenticated Privilege Escalation via Password Reset
Slug
apppresser
Published
2025-03-12
Title
AppPresser – Mobile App Framework < 4.4.11 - Unauthenticated Stored Cross-Site Scripting
Slug
apppresser
Published
2025-10-29
Title
AppPresser – Mobile App Framework < 4.5.1 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure
Slug
appreview
Published
2025-03-20
Title
AppReview <= 0.2.9 - Reflected Cross-Site Scripting
Slug
appsero-helper
Published
2025-03-10
Title
Appsero Helper < 1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
appsero-helper
Published
2025-04-21
Title
Appsero Helper < 1.3.5 - Authenticated (Subscriber+) SQL Injection
Slug
appsplate
Published
2024-12-11
Title
Appsplate <= 2.1.3 - Unauthenticated SQL Injection
Slug
appten-image-rotator
Published
2025-02-03
Title
Image Rotator <= 2.0 - Reflected Cross-Site Scripting
Slug
apptha-banner
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
apptha-slider-gallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
apptha-slider-gallery
Published
2025-05-29
Title
Apptha Slider Gallery <= 2.5 - Unauthenticated Arbitrary File Read
Slug
apptivo-business-site
Published
2022-11-30
Title
Apptivo Business Site CRM < 3.0.14 - Admin+ Stored XSS
Slug
apptivo-business-site
Published
2025-02-18
Title
Apptivo Business Site CRM <= 5.3 - Cross-Site Request Forgery to IP Address Block
Slug
apptivo-business-site
Published
2025-04-02
Title
Apptivo Business Site CRM < 5.4 - Unauthenticated Arbitrary Content Deletion
Slug
appy-pie-connect-for-woocommerce
Published
2025-10-02
Title
Appy Pie Connect for WooCommerce <= 1.1.2 - Unauthenticated Privilege Escalation
Slug
april-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
april-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload
Slug
april-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates
Slug
aprils-call-posts
Published
2024-11-23
Title
April's Call Posts < 2.2.0 - Stored XSS via CSRF
Slug
aprils-super-functions-pack
Published
2014-08-01
Title
April's Super Functions Pack 1.4.7 - readme.php page Parameter Reflected XSS
Slug
aptivada-for-wp
Published
2025-05-16
Title
Aptivada for WP <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
apus-framework
Published
2025-02-11
Title
Apus Framework < 2.5 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options