WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
arconix-shortcodes
Published
2024-10-17
Title
Arconix Shortcodes < 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
arconix-shortcodes
Published
2024-10-29
Title
Arconix Shortcodes < 2.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode
Slug
arconix-shortcodes
Published
2024-12-30
Title
Arconix Shortcodes < 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
arconix-shortcodes
Published
2025-05-16
Title
Arconix Shortcodes < 2.1.17 - Reflected Cross-Site Scripting
Slug
arconix-shortcodes
Published
2025-06-12
Title
Arconix Shortcodes < 2.1.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
arconix-shortcodes
Published
2025-10-30
Title
Arconix Shortcodes < 2.1.19 - Missing Authorization
Slug
arconix-shortcodes
Published
2025-12-01
Title
Arconix Shortcodes <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
arconix-shortcodes
Published
2024-12-30
Title
Arconix Shortcodes < 2.1.16 - Reflected Cross-Site Scripting
Slug
are-you-robot-recaptcha
Published
2025-03-22
Title
Are you robot google recaptcha for wordpress <= 2.2 - Reflected Cross-Site Scripting
Slug
arena-liveblog-and-chat-tool
Published
2024-12-11
Title
Arena.IM – Live Blogging for real-time events < 0.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
arena-liveblog-and-chat-tool
Published
2024-12-11
Title
Arena.IM – Live Blogging for real-time events <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via arena_embed_amp Shortcode
Slug
arena-liveblog-and-chat-tool
Published
2024-12-11
Title
Arena.IM – Live Blogging for real-time events <= 0.4.1 - Cross-Site Request Forgery to Settings Update
Slug
arforms
Published
2018-10-27
Title
ARForms < 3.5.2 - Unauthenticated Arbitrary File Deletion
Slug
arforms
Published
2019-10-11
Title
ArForms < 4.0 - Unauthenticated Arbitrary File Deletion via Traversal
Slug
arforms
Published
2024-04-22
Title
ARForms < 6.4.1 - Missing Authorization to Arbitrary File Deletion
Slug
arforms
Published
2024-04-22
Title
ARForms < 6.4.1 - Missing Authorization to Arbitrary Option Deletion
Slug
arforms
Published
2024-04-22
Title
ARforms < 6.4.1 - Authenticated (Subscriber+) SQL Injection
Slug
arforms
Published
2024-04-22
Title
ARforms < 6.4.1 - Reflected Cross-Site Scripting
Slug
arforms
Published
2024-04-22
Title
ARForms < 6.4.1 - Missing Authorization to Arbitrary Plugin Activation/Deactivation
Slug
arforms
Published
2024-05-17
Title
ArForms < 6.6 - Unauthenticated RCE
Slug
arforms
Published
2024-05-17
Title
ArForms < 6.6 - Admin+ Stored XSS
Slug
arforms
Published
2024-05-22
Title
Arforms < 6.4.1 - Reflected XSS
Slug
arforms
Published
2024-12-02
Title
ARForms <= 6.4.1 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Read
Slug
arforms
Published
2024-12-02
Title
ARForms <= 6.4.1 - Missing Authorization to Plugin Settings Change
Slug
arforms-form-builder
Published
2021-11-02
Title
ARForms Form Builder < 1.5 - Admin+ Stored Cross Site Scripting