WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
asgaros-forum
Published
2024-01-16
Title
Asgaros Forum < 2.8.0 - Unauthenticated PHP Object Injection in prepare_unread_status
Slug
asgaros-forum
Published
2024-04-12
Title
Asgaros Forum < 2.9.0 - Cross-Site Request Forgery
Slug
asgaros-forum
Published
2025-04-07
Title
Asgaros Forum < 3.1.0 - Subscriber+ Authorization Bypass
Slug
asgaros-forum
Published
2025-04-16
Title
Asgaros Forum < 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
asgaros-forum
Published
2025-11-07
Title
Asgaros Forum < 3.2.0 - Unauthenticated SQL Injection
Slug
asgaros-forum
Published
2025-11-11
Title
Asgaros Forum < 3.3.0 - Cross-Site Request Forgery to Subscription Settings Update
Slug
ashe-extra
Published
2023-10-16
Title
Ashe Extra < 1.2.92 - Subscriber+ Companion Plugin Activation & Content Import
Slug
ashe-extra
Published
2024-12-30
Title
Ashe Extra < 1.3 - Missing Authorization
Slug
ask-me-anything-anonymously
Published
2025-01-24
Title
Ask Me Anything (Anonymously) <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
askapache-firefox-adsense
Published
2014-08-01
Title
AskApache Firefox Adsense 3.0 - Unspecified CSRF
Slug
asmember
Published
2023-02-24
Title
asMember <= 1.5.4 - Admin+ Stored XSS
Slug
aspose-cloud-ebook-generator
Published
2015-03-27
Title
Aspose Cloud eBook Generator - File Download
Slug
aspose-doc-exporter
Published
2015-03-28
Title
Aspose.Words Exporter < 2.0 - Unauthenticated Arbitrary File Download
Slug
aspose-doc-exporter
Published
2024-04-12
Title
Aspose.Words Exporter <= 6.3.1 - Missing Authorization
Slug
aspose-importer-exporter
Published
2015-03-28
Title
Aspose Importer & Exporter 1.0 - Arbitrary File Download
Slug
aspose-pdf-exporter
Published
2015-03-28
Title
Aspose PDF Exporter - Arbitrary File Download
Slug
asset-manager
Published
2014-08-01
Title
Asset Manager 0.2 - Arbitrary File Upload
Slug
asset-manager
Published
2014-08-01
Title
Asset Manager - upload.php Arbitrary Code Execution
Slug
assist24it
Published
2024-11-08
Title
Assist24 Help Desk <= 20150401.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
assistant
Published
2023-07-26
Title
Assistant < 1.4.4 - Editor+ SSRF
Slug
assistant
Published
2024-04-25
Title
Assistant – Every Day Productivity Apps < 1.4.9.2 - Unauthenticated Sensitive Information Exposure
Slug
assistant
Published
2025-02-22
Title
Assistant < 1.5.1.1 - Authenticated (Editor+) PHP Object Injection
Slug
assistant
Published
2025-09-03
Title
WordPress Assistant < 1.5.3 - Reflected Cross-Site Scripting
Slug
assistant-for-nextgen-gallery
Published
2025-08-14
Title
Assistant for NextGEN Gallery <= 1.0.9 - Unauthenticated Arbitrary Directory Deletion
Slug
astra-addon
Published
2021-07-08
Title
Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection