WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
auxin-elements
Published
2024-12-20
Title
Shortcodes and extra features for Phlox theme < 2.17.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget
Slug
auxin-elements
Published
2025-01-31
Title
Shortcodes and extra features for Phlox theme < 2.17.5 - Missing Authorization
Slug
auxin-elements
Published
2025-10-26
Title
Shortcodes and extra features for Phlox <= 2.17.12 - Unauthenticated Information Exposure
Slug
auxin-elements
Published
2026-01-05
Title
Shortcodes and extra features for Phlox theme < 2.17.14 - Unauthenticated Draft Posts Information Exposure
Slug
auxin-elements
Published
2025-12-27
Title
Shortcodes and extra features for Phlox <= 2.17.14 - Missing Authorization
Slug
auxin-elements
Published
2026-01-09
Title
Shortcodes and extra features for Phlox theme < 2.17.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading Widget
Slug
auxin-portfolio
Published
2023-11-15
Title
Phlox Portfolio < 2.3.2 - Unauthenticated Local File Inclusion
Slug
auxin-portfolio
Published
2024-07-15
Title
Premium Portfolio Features for Phlox theme < 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios'
Slug
auxin-portfolio
Published
2024-08-28
Title
Premium Portfolio Features for Phlox theme < 2.3.5 - Contributor+ Stored XSS
Slug
auxin-portfolio
Published
2025-11-04
Title
Premium Portfolio Features for Phlox theme < 2.3.12 - Unauthenticated Local File Inclusion via args[extra_template_path]
Slug
auxin-shop
Published
2023-11-15
Title
Phlox Shop <= 2.0.0 - Unauthenticated Local File Inclusion
Slug
auyautochat-for-wp
Published
2023-06-26
Title
Autochat <= 1.1.9 - Unauthenticated Stored XSS
Slug
auyautochat-for-wp
Published
2025-11-24
Title
Autochat Automatic Conversation <= 1.1.9 - Missing Authorization to Unauthenticated Settings Update
Slug
avaibook
Published
2025-03-24
Title
AvaiBook <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
availability
Published
2025-04-24
Title
Availability Calendar <= 0.2.4 - Cross-Site Request Forgery
Slug
availability-calendar
Published
2021-08-03
Title
Availability Calendar < 1.2.2 - Authenticated Stored Cross-Site Scripting
Slug
availability-calendar
Published
2021-08-04
Title
Availability Calendar < 1.2.1 - Authenticated SQL Injection
Slug
availability-calendar
Published
2023-11-24
Title
Availability Calendar <= 1.2.6 - Cross-Site Request Forgery via add_availability_calendar_create_admin_page()
Slug
avalex
Published
2023-02-02
Title
Avalex < 3.0.4 - Admin+ Stored XSS
Slug
avalex
Published
2023-11-14
Title
avalex – Automatisch sichere Rechtstexte < 3.0.9 - Missing Authorization
Slug
avalex
Published
2026-03-17
Title
avalex – Automatisch sichere Rechtstexte < 3.1.4 - Missing Authorization
Slug
avartan-slider-lite
Published
2023-08-11
Title
Avartan Slider Lite <= 1.5.3 - Reflected XSS
Slug
avatar
Published
2025-04-17
Title
Avatar <= 0.1.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
avatar
Published
2025-04-17
Title
Avatar <= 0.1.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
avchat-3
Published
2014-08-01
Title
AVChat Video Chat 1.4.1 - index_popup.php Multiple Parameters Reflected XSS