WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
aryo-activity-log
Published
2023-09-01
Title
Activity Log < 2.8.8 - IP Spoofing
Slug
aryo-activity-log
Published
2024-11-20
Title
Activity Log – Monitor & Record User Changes < 2.11.2 - Unauthenticated Stored XSS via Event Context
Slug
aryo-activity-log
Published
2026-09-02
Title
Activity Log – Monitor User and Agent Changes < 2.14.0 - Cross-Site Request Forgery
Slug
as-create-pinterest-pinboard-pages
Published
2022-08-10
Title
Create Pinterest Pinboard Pages <= 1.0 - Subscriber+ Settings Update to Stored XSS
Slug
as-english-admin
Published
2025-03-11
Title
AS English Admin <= 1.0.0 - Open Redirection
Slug
as-password-field-in-default-registration-form
Published
2026-01-05
Title
AS Password Field In Default Registration Form <= 2.0.0 - Unauthenticated Privilege Escalation via Account Takeover
Slug
asf-allow-svg-files
Published
2022-05-30
Title
Allow SVG Files < 1.1 - Admin+ Arbitrary File Upload
Slug
asf-allow-svg-files
Published
2022-07-04
Title
Allow SVG Files <= 1.1 - Author+ Stored Cross Site Scripting via SVG
Slug
asgard
Published
2024-12-19
Title
Asgard Security Scanner <= 0.7 - Reflected XSS
Slug
asgaros-forum
Published
2021-10-11
Title
Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection
Slug
asgaros-forum
Published
2021-11-29
Title
Asgaros Forums < 1.15.14 - Admin+ Stored Cross-Site Scripting
Slug
asgaros-forum
Published
2021-12-21
Title
Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id
Slug
asgaros-forum
Published
2022-01-31
Title
Asgaros Forum < 2.0.0 - Subscriber+ Blind SQL Injection
Slug
asgaros-forum
Published
2022-12-22
Title
Asgaros Forum <= 2.2.0 - Cross-Site Request Forgery
Slug
asgaros-forum
Published
2023-11-06
Title
Asgaros Forum < 2.7.1 - Unauthenticated Arbitrary File Upload
Slug
asgaros-forum
Published
2024-01-16
Title
Asgaros Forum < 2.8.0 - Unauthenticated PHP Object Injection in prepare_unread_status
Slug
asgaros-forum
Published
2024-04-12
Title
Asgaros Forum < 2.9.0 - Cross-Site Request Forgery
Slug
asgaros-forum
Published
2025-04-07
Title
Asgaros Forum < 3.1.0 - Subscriber+ Authorization Bypass
Slug
asgaros-forum
Published
2025-04-16
Title
Asgaros Forum < 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
asgaros-forum
Published
2025-11-07
Title
Asgaros Forum < 3.2.0 - Unauthenticated SQL Injection
Slug
asgaros-forum
Published
2025-11-11
Title
Asgaros Forum < 3.3.0 - Cross-Site Request Forgery to Subscription Settings Update
Slug
ashe-extra
Published
2023-10-16
Title
Ashe Extra < 1.2.92 - Subscriber+ Companion Plugin Activation & Content Import
Slug
ashe-extra
Published
2024-12-30
Title
Ashe Extra < 1.3 - Missing Authorization
Slug
ask-me-anything-anonymously
Published
2025-01-24
Title
Ask Me Anything (Anonymously) <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
askapache-firefox-adsense
Published
2014-08-01
Title
AskApache Firefox Adsense 3.0 - Unspecified CSRF