WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
arrow-twitter-feed
Published
2025-04-01
Title
Arrow Custom Feed for Twitter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ars-affiliate-page
Published
2025-01-06
Title
ARS Affiliate Page Plugin < 2.0.4 - Reflected Cross-Site Scripting
Slug
arscode-ninja-popups
Published
2023-07-18
Title
Ninja Popups <= 4.7.5 - Unauthenticated Open Redirect
Slug
arscode-ninja-popups
Published
2025-10-29
Title
Ninja Popups <= 4.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
art-decoration-shortcode
Published
2023-07-19
Title
Art Decoration Shortcode <= 1.5.6 - Contributor+ Stored XSS
Slug
art-direction
Published
2023-07-12
Title
Art Direction <= 0.2.4 - Contributor+ Stored XSS
Slug
art-picture-gallery
Published
2020-04-02
Title
Art-Picture-Gallery <= 1.2.9 - Unauthenticated Arbitrary File Upload
Slug
artibot
Published
2024-02-26
Title
ArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Missing Authorization to Settings Update
Slug
artibot
Published
2024-02-27
Title
ArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Authenticated (Admin+) Cross-Site Scripting
Slug
artibot
Published
2025-11-17
Title
ArtiBot Free Chat Bot for WebSites <= 1.1.7 - Reflected Cross-Site Scripting via PostMessage
Slug
article-analytics
Published
2023-10-27
Title
Article Analytics <= 1.0 - Unauthenticated SQL injection
Slug
article-directory
Published
2023-03-17
Title
Article Directory <= 1.3 - Admin+ Stored XSS
Slug
article-directory-redux
Published
2023-08-14
Title
Article Directory Redux <= 1.0.2 - Admin+ Stored XSS
Slug
article2pdf
Published
2019-03-26
Title
article2pdf - Multiple Vulnerabilities
Slug
artificial-intelligence-auto-content-generator
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
artificial-intelligence-auto-content-generator
Published
2025-07-22
Title
AI Tools <= 4.0.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
artiss-currency-converter
Published
2025-10-10
Title
Open Currency Converter <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
artplacer-widget
Published
2023-12-07
Title
ArtPlacer Widget < 2.20.7 - Editor+ SQLi
Slug
artplacer-widget
Published
2024-06-28
Title
ArtPlacer Widget < 2.21.2 - Stored XSS via CSRF
Slug
artplacer-widget
Published
2024-06-28
Title
ArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion
Slug
artplacer-widget
Published
2025-11-23
Title
ArtPlacer Widget < 2.23 - Authenticated (Contributor+) SQL Injection
Slug
artplacer-widget
Published
2026-01-22
Title
ArtPlacer Widget < 2.23.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
aruba-hispeed-cache
Published
2023-11-28
Title
Aruba HiSpeed Cache < 2.0.7 - Unauthenticated Log File Access
Slug
aruba-hispeed-cache
Published
2024-08-07
Title
Aruba HiSpeed Cache < 2.0.13 - Missing Authorization
Slug
aruba-hispeed-cache
Published
2026-01-01
Title
Aruba HiSpeed Cache < 3.0.3 - Missing Authorization