WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
author-showcase
Published
2025-01-16
Title
Author Showcase <= 1.4.3 - Reflected Cross-Site Scripting
Slug
author-slug
Published
2024-11-01
Title
Custom Author URL <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
author-work-in-progress-bar
Published
2025-04-16
Title
Author WIP Progress Bar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
authorizenet-payment-gateway-for-woocommerce
Published
2024-06-03
Title
Authorize.net Payment Gateway For WooCommerce <= 8.0 - Insufficient Verification of Data Authenticity to Unauthenticated Payment Bypass
Slug
authors-autocomplete-meta-box
Published
2025-02-02
Title
Authors Autocomplete Meta Box <= 1.2 - Reflected Cross-Site Scripting
Slug
authors-list
Published
2023-07-10
Title
Authors List < 2.0.3 - Reflected Cross-Site Scripting
Slug
authors-list
Published
2024-12-03
Title
Authors List < 2.0.5 - Unauthenticated Arbitrary Shortcode Execution
Slug
authors-list
Published
2025-02-28
Title
Authors List < 2.0.6.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
authors-list
Published
2025-09-05
Title
Authors List <= 2.0.6.1 - Cross-Site Request Forgery
Slug
authors-list
Published
2025-11-10
Title
Authors List < 2.0.6.2 - Authenticated (Contributor+) Sensitive Information Exposure via Limited Method Call in Plugin's Shortcode
Slug
authorsure
Published
2025-09-22
Title
AuthorSure <= 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
authorsure
Published
2025-11-20
Title
AuthorSure <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
authorsy
Published
2025-09-10
Title
Authorsy – Author Box, Multiple Authors, Guest Authors & Post Rating < 1.0.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
authorsy
Published
2026-02-03
Title
Authorsy < 1.0.7 - Unauthenticated Insecure Direct Object Reference
Slug
auto-advance-for-gravity-forms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
auto-advance-for-gravity-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
auto-alt-text
Published
2025-12-06
Title
Auto Alt Text < 2.5.3 - Cross-Site Request Forgery
Slug
auto-attachments
Published
2014-08-01
Title
Auto Attachments 0.2.9 - Shell Upload
Slug
auto-attachments
Published
2025-06-12
Title
Auto Attachments <= 1.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
auto-bulb-finder-for-wp-wc
Published
2025-10-02
Title
Auto Bulb Finder for WordPress < 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
auto-date-year-month
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
auto-date-year-month
Published
2024-10-14
Title
AADMY – Add Auto Date Month Year Into Posts < 2.0.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
auto-delete-posts
Published
2022-05-23
Title
Auto Delete Posts <= 1.3.0 - Arbitrary Settings Update via CSRF
Slug
auto-excerpt-everywhere
Published
2023-10-27
Title
Auto Excerpt everywhere <= 1.5 - Cross-Site Request Forgery
Slug
auto-featured-image
Published
2024-06-26
Title
Auto Featured Image <= 1.2 - Authenticated (Contributor+) Arbitrary File Upload