WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
feedblitz-email-subscription
Published
2025-04-01
Title
Subscription Form for Feedblitz <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
feedbucket
Published
2025-04-01
Title
Feedbucket < 1.0.7 - Cross-Site Request Forgery
Slug
feedburner-alternative-and-rss-redirect
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
feedburner-alternative-and-rss-redirect
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
feedburner-optin-form
Published
2025-01-16
Title
Feedburner Optin Form <= 0.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
feedfocal
Published
2023-10-24
Title
FeedFocal < 1.3.0 - Unauthenticated Tracking Code Update
Slug
feedlist
Published
2010-11-05
Title
Feedlist < 2.70.00 - XSS
Slug
feedpress-generator
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
feedpress-generator
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
feedpress-generator
Published
2024-12-06
Title
Feedpress Generator – External RSS Frontend Customizer <= 1.2.1 - Reflected Cross-Site Scripting
Slug
feedpress-generator
Published
2024-12-11
Title
Feedpress Generator <= 1.2.1 - Reflected Cross-Site Scripting
Slug
feeds-for-youtube
Published
2021-07-20
Title
Multiple Plugins from Smash Balloon - Reflected Cross-Site Scripting
Slug
feeds-for-youtube
Published
2023-09-13
Title
Feeds for YouTube < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
feeds-for-youtube
Published
2024-07-10
Title
Feeds for YouTube (YouTube video, channel, and gallery plugin) < 2.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
feeds-for-youtube
Published
2025-11-06
Title
Feeds for YouTube < 2.6.1 - Missing Authorization
Slug
feedweb
Published
2014-08-01
Title
Feedweb 2.4 - DOM Cross-Site Scripting (XSS)
Slug
feedweb
Published
2014-08-01
Title
Feedweb < 1.9 - Cross-Site Scripting (XSS)
Slug
feedweb
Published
2015-01-15
Title
Feedweb 2.4.1-3.0.6 - SQL Injection
Slug
feedwordpress
Published
2015-04-26
Title
FeedWordPress <= 2015.0426 - Cross-Site Scripting (XSS)
Slug
feedwordpress
Published
2015-05-19
Title
FeedWordPress < 2015.0514 - XSS & SQL-Injection
Slug
feedwordpress
Published
2022-01-18
Title
FeedWordPress < 2022.0123 - Reflected Cross-Site Scripting (XSS)
Slug
feedwordpress
Published
2024-03-04
Title
FeedWordPress < 2024.0428 - Unauthenticated Draft Access
Slug
feedzy-rss-feeds
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
feedzy-rss-feeds
Published
2023-01-04
Title
RSS Aggregator by Feedzy < 4.1.1 - Contributor+ Stored XSS
Slug
feedzy-rss-feeds
Published
2020-09-16
Title
RSS Aggregator by Feedzy < 3.4.3 - Arbitrary Settings Update via CSRF