WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ark-wysiwyg-comment-editor
Published
2021-09-23
Title
Ark Comment Editor <= 2.15.6 - Iframe Injection via Comment
Slug
arkhe-blocks
Published
2024-07-10
Title
Arkhe Blocks < 2.23.0 - Contributor+ Stored XSS
Slug
arkhe-blocks
Published
2024-10-14
Title
Arkhe Blocks < 2.27.0 - Contributor+ Stored XSS
Slug
arkhe-blocks
Published
2024-12-02
Title
Arkhe Blocks < 2.27.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via block attributes
Slug
arkhe-blocks
Published
2025-04-04
Title
Arkhe Blocks <= 2.27.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
armember
Published
2022-12-01
Title
ARMember < 5.6 - Unauthenticated Privilege Escalation
Slug
armember
Published
2024-06-21
Title
ARMember Premium < 6.7.1 - Cross-Site Request Forgery via multiple functions
Slug
armember-membership
Published
2022-06-06
Title
ARMember < 3.4.8 - Unauthenticated Admin Account Takeover
Slug
armember-membership
Published
2023-04-19
Title
ARMember < 4.0.2 - Reflected XSS
Slug
armember-membership
Published
2023-06-13
Title
ARMember < 4.0.3 - Admin+ Stored XSS
Slug
armember-membership
Published
2023-07-05
Title
ARMember < 4.0.6 - ARMember Cross-Site Request Forgery
Slug
armember-membership
Published
2023-07-18
Title
ARMember (free and premium) - Admin+ Stored Cross-Site Scripting
Slug
armember-membership
Published
2023-07-14
Title
ARMember Lite - Membership < 4.0.17 - Admin+ Stored XSS
Slug
armember-membership
Published
2023-03-27
Title
ARMember < 4.0 - Unauthenticated SQLi
Slug
armember-membership
Published
2023-12-26
Title
ARMember < 4.0.11 - Subscriber+ Privilege Escalation
Slug
armember-membership
Published
2024-01-11
Title
ARMember < 4.0.23 - Cross-Site Request Forgery
Slug
armember-membership
Published
2024-02-01
Title
ARMember < 4.0.25 - Improper Access Control to Sensitive Information Exposure via REST API
Slug
armember-membership
Published
2024-03-15
Title
ARMember < 4.0.24 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
armember-membership
Published
2024-04-22
Title
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup < 4.0.29 - Missing Authorization
Slug
armember-membership
Published
2024-04-29
Title
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup < 4.0.31 - Open Redirect
Slug
armember-membership
Published
2024-03-26
Title
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup < 4.0.27 - Unauthenticated PHP Object Injection
Slug
armember-membership
Published
2024-03-26
Title
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup < 4.0.27 - Authenticated (Contributor+) PHP Object Injection
Slug
armember-membership
Published
2024-04-04
Title
ARMember < 4.0.28 - Directory Traversal via X-FILENAME
Slug
armember-membership
Published
2024-08-16
Title
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup < 4.0.38 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
Slug
armember-membership
Published
2024-12-05
Title
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup < 4.0.52 - Authenticated (Subscriber+) Arbitrary Shortcode Execution