WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
assistant
Published
2023-07-26
Title
Assistant < 1.4.4 - Editor+ SSRF
Slug
assistant
Published
2024-04-25
Title
Assistant – Every Day Productivity Apps < 1.4.9.2 - Unauthenticated Sensitive Information Exposure
Slug
assistant
Published
2025-02-22
Title
Assistant < 1.5.1.1 - Authenticated (Editor+) PHP Object Injection
Slug
assistant
Published
2025-09-03
Title
WordPress Assistant < 1.5.3 - Reflected Cross-Site Scripting
Slug
assistant-for-nextgen-gallery
Published
2025-08-14
Title
Assistant for NextGEN Gallery <= 1.0.9 - Unauthenticated Arbitrary Directory Deletion
Slug
astra-addon
Published
2021-07-08
Title
Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection
Slug
astra-addon
Published
2023-12-05
Title
Astra Pro < 4.3.2 - Authenticated(Contributor+) Remote Code Execution via Metabox
Slug
astra-bulk-edit
Published
2023-09-22
Title
Astra Bulk Edit < 1.2.8 - Missing Authorization
Slug
astra-import-export
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
astra-import-export
Published
2020-09-16
Title
Import / Export Customizer Settings < 1.0.4 - Cross-Site Request Forgery
Slug
astra-pro-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.5 - Incorrect Authorization
Slug
astra-pro-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
astra-sites
Published
2021-11-11
Title
Starter Templates < 2.7.1 - Contributor+ Block Import to Stored XSS
Slug
astra-sites
Published
2023-02-20
Title
Starter Templates <= 3.1.20 - Settings Update via CSRF
Slug
astra-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.5 - Incorrect Authorization
Slug
astra-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
astra-sites
Published
2024-05-08
Title
Starter Templates — Elementor, WordPress & Beaver Builder Templates < 4.1.7 - Contributor+ Server-Side Request Forgery
Slug
astra-sites
Published
2024-05-10
Title
Starter Templates — Elementor, WordPress & Beaver Builder Templates < 4.2.2 - Contributor+ Stored Cross-Site Scripting
Slug
astra-sites
Published
2024-09-27
Title
Starter Templates < 4.4.1 - Author+ Stored XSS
Slug
astra-sites
Published
2025-01-24
Title
Starter Templates < 4.4.10 - Cross-Site Request Forgery
Slug
astra-sites
Published
2025-12-05
Title
Starter Templates < 4.4.42 - Author+ Arbitrary File Upload via WXR Upload Bypass
Slug
astra-widgets
Published
2024-10-24
Title
Astra Widgets < 1.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
astra-widgets
Published
2025-01-03
Title
Astra Widgets < 1.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
astra-widgets
Published
2025-12-28
Title
Astra Widgets < 1.2.17 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
async-javascript
Published
2020-02-27
Title
Async Javascript < 2.20.02.27 - Subscriber+ Stored XSS via Plugin Settings Change