WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
automizy-gravity-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
automotive
Published
2026-01-05
Title
Automotive Listings < 18.7 - Unauthenticated SQL Injection
Slug
autopilot
Published
2024-11-19
Title
Ortto < 1.0.21 - Reflected Cross-Site Scripting
Slug
autoptimize
Published
2020-08-24
Title
Autoptimize < 2.7.7 - Authenticated Arbitrary File Upload
Slug
autoptimize
Published
2021-05-07
Title
Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
autoptimize
Published
2020-10-09
Title
Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"
Slug
autoptimize
Published
2020-10-09
Title
Autoptimize < 2.7.8 - Race Condition leading to RCE
Slug
autoptimize
Published
2020-10-09
Title
Autoptimize < 2.7.8 - Authenticated Stored XSS via File Upload
Slug
autoptimize
Published
2022-08-17
Title
Autoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting
Slug
autoptimize
Published
2022-12-05
Title
Autoptimize < 3.1.0 - Sensitive Data Disclosure
Slug
autoptimize
Published
2023-05-02
Title
Autoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings Import
Slug
autoptimize
Published
2025-12-03
Title
Autoptimize < 3.1.14 - Contributor+ Stored XSS
Slug
autosave-net
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
autosave-net
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
autoship-cloud
Published
2025-02-20
Title
Autoship Cloud for WooCommerce Subscription Products < 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
autoship-cloud
Published
2025-02-22
Title
Autoship Cloud for WooCommerce Subscription Products < 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
autotitle-for-wordpress
Published
2024-01-02
Title
Autotitle for WordPress <= 1.0.3 - Settings Update to Stored XSS via CSRF
Slug
autowp-ai-content-writer-rewriter
Published
2024-12-11
Title
AutoWP < 2.0.9 - Cross-Site Request Forgery
Slug
autowp-ai-content-writer-rewriter
Published
2025-08-21
Title
AutoWP <= 2.2.4 - Missing Authorization
Slug
auxin-elements
Published
2022-06-20
Title
Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting
Slug
auxin-elements
Published
2022-11-17
Title
Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection
Slug
auxin-elements
Published
2023-11-15
Title
Shortcodes and extra features for Phlox theme < 2.15.0 - Unauthenticated Local File Inclusion
Slug
auxin-elements
Published
2023-12-06
Title
Shortcodes and extra features for Phlox theme < 2.15.5 - Contributor+ Stored XSS
Slug
auxin-elements
Published
2024-03-29
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Subscriber+ Template Import
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via Custom JS