WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via aux_gmaps Shortcode
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via title_tag
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ XSS via HTML Element
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.6 - Contributor+ Stored XSS via Accordion Widget
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.17.6 - Subscriber+ PHP Object Injection
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via aux_timeline Shortcode
Slug
auxin-elements
Published
2024-10-04
Title
Shortcodes and extra features for Phlox theme < 2.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets
Slug
auxin-elements
Published
2024-12-20
Title
Shortcodes and extra features for Phlox theme < 2.17.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes
Slug
auxin-elements
Published
2024-12-20
Title
Shortcodes and extra features for Phlox theme < 2.17.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget
Slug
auxin-elements
Published
2025-01-31
Title
Shortcodes and extra features for Phlox theme < 2.17.5 - Missing Authorization
Slug
auxin-elements
Published
2025-10-26
Title
Shortcodes and extra features for Phlox <= 2.17.12 - Unauthenticated Information Exposure
Slug
auxin-elements
Published
2026-01-05
Title
Shortcodes and extra features for Phlox theme < 2.17.14 - Unauthenticated Draft Posts Information Exposure
Slug
auxin-elements
Published
2025-12-27
Title
Shortcodes and extra features for Phlox <= 2.17.14 - Missing Authorization
Slug
auxin-elements
Published
2026-01-09
Title
Shortcodes and extra features for Phlox theme < 2.17.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget
Slug
auxin-portfolio
Published
2023-11-15
Title
Phlox Portfolio < 2.3.2 - Unauthenticated Local File Inclusion
Slug
auxin-portfolio
Published
2024-07-15
Title
Premium Portfolio Features for Phlox theme < 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios'
Slug
auxin-portfolio
Published
2024-08-28
Title
Premium Portfolio Features for Phlox theme < 2.3.5 - Contributor+ Stored XSS
Slug
auxin-portfolio
Published
2025-11-04
Title
Premium Portfolio Features for Phlox theme < 2.3.12 - Unauthenticated Local File Inclusion via args[extra_template_path]
Slug
auxin-shop
Published
2023-11-15
Title
Phlox Shop <= 2.0.0 - Unauthenticated Local File Inclusion
Slug
auyautochat-for-wp
Published
2023-06-26
Title
Autochat <= 1.1.9 - Unauthenticated Stored XSS
Slug
auyautochat-for-wp
Published
2025-11-24
Title
Autochat Automatic Conversation <= 1.1.9 - Missing Authorization to Unauthenticated Settings Update
Slug
avaibook
Published
2025-03-24
Title
AvaiBook <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
availability
Published
2025-04-24
Title
Availability Calendar <= 0.2.4 - Cross-Site Request Forgery
Slug
availability-calendar
Published
2021-08-03
Title
Availability Calendar < 1.2.2 - Authenticated Stored Cross-Site Scripting
Slug
availability-calendar
Published
2021-08-04
Title
Availability Calendar < 1.2.1 - Authenticated SQL Injection