WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
featured-post-creative
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Slug
featured-post-with-thumbnail
Published
2014-08-01
Title
Featured Post with thumbnail 1.4 - Unspecified timthumb
Slug
featured-posts-grid
Published
2025-03-11
Title
Featured Posts Grid <= 1.7 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
featured-posts-scroll
Published
2024-11-01
Title
Featured Posts Scroll <= 1.25 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
featured-posts-with-multiple-custom-groups-fpmcg
Published
2024-10-09
Title
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Cross-Site Request Forgery
Slug
featured-posts-with-multiple-custom-groups-fpmcg
Published
2024-10-09
Title
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Reflected Cross-Site Scripting
Slug
featured-product-by-category-name
Published
2024-11-08
Title
Featured product by category name <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
featured-products-first-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
featured-products-first-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
featured-video-plus
Published
2026-08-06
Title
Featured Video Plus <= 2.3.3 - Unauthenticated Information Exposure
Slug
featured-video-plus
Published
2026-08-18
Title
Featured Video Plus <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
features
Published
2025-11-04
Title
Features <= 0.0.2 - Missing Authorization to Authenticated (Subscriber+) Option Reset
Slug
fediverse-embeds
Published
2024-11-19
Title
Fediverse Embeds < 1.5.4 - Unauthenticated Arbitrary File Upload
Slug
fediverse-embeds
Published
2026-06-12
Title
Fediverse Embeds < 1.5.9 - Unauthenticated Server-Side Request Forgery
Slug
fediverse-embeds
Published
2026-06-12
Title
Fediverse Embeds < 1.5.9 - Unauthenticated Server-Side Request Forgery
Slug
fediverse-embeds
Published
2026-06-18
Title
Fediverse Embeds < 1.5.8 - Unauthenticated SSRF via Media Proxy
Slug
fediverse-embeds
Published
2026-06-18
Title
Fediverse Embeds < 1.5.8 - Unauthenticated SSRF via Site Info Endpoint
Slug
feed-changer
Published
2023-02-15
Title
Feed Changer & Removerr < 0.3 - Admin+ Stored XSS
Slug
feed-comments-number
Published
2024-10-14
Title
Feed Comments Number <= 0.2.1 - Unauthenticated Arbitrary File Upload
Slug
feed-instagram-lite
Published
2022-06-30
Title
Gallery for Social Photo < 1.0.0.29 - Arbitrary Post Duplication via CSRF
Slug
feed-instagram-lite
Published
2025-03-25
Title
Gallery for Social Photo < 1.0.0.37 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
feed-kuantokusta-for-woocommerce
Published
2026-04-22
Title
Feed KuantoKusta for WooCommerce – Free < 5.3.1 - Unauthenticated SQL Injection
Slug
feed-them-gallery
Published
2019-07-08
Title
Feed Them Gallery <= 1.1.8 - XSS
Slug
feed-them-social
Published
2015-02-02
Title
Feed Them Social < 1.7.0 - XSS & Arbitrary Shortcode Execution
Slug
feed-them-social
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)