WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
blog-designer-pack
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
blog-designer-pro
Published
2025-05-21
Title
Blog Designer PRO for WordPress <= 3.4.7 - Unauthenticated Local File Inclusion
Slug
blog-designer-pro
Published
2025-05-30
Title
Blog Designer PRO for WordPress <= 3.4.7 - Reflected Cross-Site Scripting
Slug
blog-designer-pro
Published
2025-08-13
Title
Blog Designer PRO <= 3.4.7 - Authenticated (Subscriber+) Local File Inclusion
Slug
blog-designer-pro
Published
2025-08-29
Title
Blog Designer PRO <= 3.4.8 - Missing Authorization
Slug
blog-filter
Published
2023-10-03
Title
Blog Filter < 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
blog-filter
Published
2025-12-29
Title
Blog Filter < 1.7.4 - Contributor+ Stored XSS
Slug
blog-filter
Published
2026-02-11
Title
Blog Filter < 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blog-in-blog
Published
2023-05-30
Title
Blog-in-Blog <= 1.1.1 - Editor+ Stored Cross-Site Scripting via Shortcode
Slug
blog-in-blog
Published
2023-05-30
Title
Blog-in-Blog <= 1.1.1 - Editor+ Local File Inclusion via Shortcode
Slug
blog-manager-light
Published
2023-10-06
Title
Blog Manager Light <= 1.20 - Settings Update via CSRF
Slug
blog-manager-wp
Published
2025-04-24
Title
Blog Manager WP <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
blog-posts-and-category-for-elementor
Published
2024-07-08
Title
Blog, Posts and Category Filter for Elementor < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post and Category Filter Widget
Slug
blog-posts-and-category-for-elementor
Published
2025-02-03
Title
Blog, Posts and Category Filter for Elementor < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blog-settings
Published
2026-05-04
Title
Blog Settings <= 1.0 - Reflected Cross-Site Scripting via 'page' Parameter
Slug
blog-sidebar-widget
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
blog-sidebar-widget
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blog-stats-by-w3counter
Published
2025-03-11
Title
W3Counter Free Real-Time Web Stats <= 4.1 - Cross-Site Request Forgery
Slug
blog-summary
Published
2025-01-16
Title
Blog Summary <= 0.1.2 - Contributor+ Stored XSS
Slug
blog2social
Published
2019-02-05
Title
Blog2Social <= 5.0.2 - Authenticated Cross-Site Scripting (XSS)
Slug
blog2social
Published
2018-09-21
Title
Blog2Social <= 5.0.0 - PHP Obj Injection
Slug
blog2social
Published
2019-07-25
Title
Blog2Social < 5.6.0 - SQL Injection
Slug
blog2social
Published
2019-11-14
Title
Blog2Social < 5.9.0 - Cross-Site Scripting Issue
Slug
blog2social
Published
2020-05-29
Title
Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection
Slug
blog2social
Published
2021-11-22
Title
Blog2Social < 6.8.7 - Reflected Cross-Site Scripting