WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
anti-plagiarism
Published
2016-04-12
Title
anti-plagiarism <= 3.60 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
anti-spam
Published
2016-01-30
Title
Anti-Spam <= 4.1 - XSS
Slug
anti-spam
Published
2022-08-17
Title
Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing
Slug
anti-spam
Published
2024-07-11
Title
Titan Anti-spam & Security < 7.3.8 - Missing Authorization
Slug
antibots
Published
2025-07-16
Title
Stop and Block bots plugin Anti bots < 1.50 - Missing Authorization
Slug
antideo-email-validator
Published
2026-01-16
Title
Antideo Email Validator < 1.0.11 - Unauthenticated SQL Injection
Slug
antihacker
Published
2022-11-21
Title
AntiHacker < 4.20 - Subscriber+ Arbitrary Plugin Installation
Slug
antihacker
Published
2023-12-22
Title
Anti Hacker < 4.35 - Cross-Site Request Forgery via antihacker_ajax_scan
Slug
antihacker
Published
2024-02-27
Title
Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan < 4.52 - Missing Authorization to Unauthenticated IP Address Whitelist
Slug
antihacker
Published
2024-02-27
Title
Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan < 4.53 - Missing Authorization to Authenticated (Subscriber+) Table Truncation
Slug
antispam-bee
Published
2023-11-27
Title
Antispam Bee < 2.11.4 - IP Address Spoofing via get_client_ip
Slug
antivirus
Published
2014-08-01
Title
AntiVirus 1.0 - PHP Backdoor Detection Bypass
Slug
antivirus
Published
2014-08-01
Title
AntiVirus 1.0 - uninstall.php Direct Request Path Disclosure
Slug
anual-archive
Published
2023-01-12
Title
Annual Archive < 1.6.0 - Contributor+ Stored XSS
Slug
anual-archive
Published
2023-12-06
Title
Annual Archive <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
anual-archive
Published
2024-04-25
Title
Annual Archive <= 1.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
any-hostname
Published
2021-06-28
Title
Any Hostname <= 1.0.6 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
any-news-ticker
Published
2025-09-29
Title
Any News Ticker <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
any-popup
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
any-popup
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
any-post-slider
Published
2026-03-20
Title
Any Post Slider < 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_type' Shortcode Attribute
Slug
anyclip-media
Published
2025-09-22
Title
AnyClip Luminous Studio <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
anyclip-media
Published
2025-09-22
Title
AnyClip Luminous Studio <= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
anycomment
Published
2018-07-16
Title
Anycomment < 0.0.33 - XSS
Slug
anycomment
Published
2021-12-20
Title
AnyComment < 0.3.5 - Open Redirect