WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
astra-sites
Published
2023-02-20
Title
Starter Templates <= 3.1.20 - Settings Update via CSRF
Slug
astra-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.5 - Incorrect Authorization
Slug
astra-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
astra-sites
Published
2024-05-08
Title
Starter Templates — Elementor, WordPress & Beaver Builder Templates < 4.1.7 - Contributor+ Server-Side Request Forgery
Slug
astra-sites
Published
2024-05-10
Title
Starter Templates — Elementor, WordPress & Beaver Builder Templates < 4.2.2 - Contributor+ Stored Cross-Site Scripting
Slug
astra-sites
Published
2024-09-27
Title
Starter Templates < 4.4.1 - Author+ Stored XSS
Slug
astra-sites
Published
2025-01-24
Title
Starter Templates < 4.4.10 - Cross-Site Request Forgery
Slug
astra-sites
Published
2025-12-05
Title
Starter Templates < 4.4.42 - Author+ Arbitrary File Upload via WXR Upload Bypass
Slug
astra-widgets
Published
2024-10-24
Title
Astra Widgets < 1.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
astra-widgets
Published
2025-01-03
Title
Astra Widgets < 1.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
astra-widgets
Published
2025-12-28
Title
Astra Widgets < 1.2.17 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
astro-booking-engine
Published
2026-08-13
Title
Astro Booking Engine < 1.4.1 - Cross-Site Request Forgery to Settings Reset
Slug
async-javascript
Published
2020-02-27
Title
Async Javascript < 2.20.02.27 - Subscriber+ Stored XSS via Plugin Settings Change
Slug
async-javascript
Published
2021-06-13
Title
Async JavaScript < 2.21.06.29 - Authenticated (admin+) Stored XSS
Slug
asynchronous-javascript
Published
2026-01-27
Title
Asynchronous Javascript <= 1.3.5 - Reflected Cross-Site Scripting
Slug
at-internet
Published
2025-04-10
Title
AT Internet SmartTag <= 0.2 - Reflected Cross-Site Scripting
Slug
atarapay-woocommerce
Published
2024-11-18
Title
AtaraPay WooCommerce Payment Gateway <= 2.0.13 - Reflected Cross-Site Scripting
Slug
atarim-visual-collaboration
Published
2023-09-04
Title
Atarim < 3.9.4 - Admin+ Stored XSS
Slug
atarim-visual-collaboration
Published
2023-11-07
Title
Atarim < 3.13 - Unauthenticated Stored XSS
Slug
atarim-visual-collaboration
Published
2024-05-22
Title
Atarim < 3.30 - Unauthenticated Settings Update, Post Deletion etc
Slug
atarim-visual-collaboration
Published
2024-05-30
Title
Visual Website Collaboration, Feedback & Project Management – Atarim < 3.31 - Unauthenticated Stored Cross-Site Scripting
Slug
atarim-visual-collaboration
Published
2024-06-28
Title
Atarim < 3.32 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
atarim-visual-collaboration
Published
2024-07-19
Title
Atarim < 4.0.1 - Missing Authorization
Slug
atarim-visual-collaboration
Published
2024-08-09
Title
Visual Website Collaboration, Feedback & Project Management – Atarim < 4.0.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
atarim-visual-collaboration
Published
2024-08-16
Title
Atarim < 4.0.2 - Missing Authorization via remove_feedbacktool_notice()