WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fetch-tweets
Published
2021-09-21
Title
Fetch Tweets <= 2.6.4 - Reflected Cross-Site Scripting
Slug
fg-drupal-to-wp
Published
2024-02-02
Title
FG Drupal to WordPress < 3.68.0 - Cross-Site Request Forgery via ajax_importer
Slug
fg-drupal-to-wp
Published
2024-04-05
Title
FG Drupal to WordPress < 3.71.0 - Sensitive Information Exposure
Slug
fg-drupal-to-wp
Published
2025-07-16
Title
FG Drupal to WordPress < 3.90.1 - Authenticated (Admin+) Server-Side Request Forgery
Slug
fg-joomla-to-wordpress
Published
2017-08-24
Title
FG Joomla to WordPress < 3.31.0 - XSS in the AJAX Imported
Slug
fg-joomla-to-wordpress
Published
2024-04-22
Title
FG Joomla to WordPress < 4.21.0 - Sensitive Information Exposure
Slug
fg-prestashop-to-woocommerce
Published
2017-08-24
Title
FG PrestaShop for WooCommerce < 3.20.0 - XSS
Slug
fg-prestashop-to-woocommerce
Published
2024-03-29
Title
FG PrestaShop to WooCommerce < 4.47.0 - Unauthenticated Sensitive Information Disclosure
Slug
fgallery
Published
2014-08-01
Title
fGallery 2.4.1 - fimrss.php SQL Injection
Slug
fgallery_plus
Published
2014-08-01
Title
fGallery_Plus - fim_rss.php album Parameter Reflected XSS
Slug
fifthsegment-whitelist
Published
2024-10-21
Title
Whitelist <= 3.5 - Reflected Cross-Site Scripting
Slug
file-away
Published
2023-05-16
Title
File Away <= 3.9.9.0.1 - Contributor+ Stored XSS via Shortcode
Slug
file-away
Published
2025-03-18
Title
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated File Upload via upload Function
Slug
file-away
Published
2025-03-19
Title
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read
Slug
file-gallery
Published
2014-08-01
Title
File Gallery 1.7.9 - Settings Page create_function Function Remote Comm& Execution
Slug
file-gallery
Published
2023-04-19
Title
File Gallery < 1.8.5.4 - Contributor+ Stored XSS
Slug
file-gallery
Published
2023-11-28
Title
File Gallery <= 1.8.5.4 - Reflected Cross-Site Scripting via post_id
Slug
file-groups
Published
2014-08-01
Title
File Groups <= 1.1.2 - SQL Injection
Slug
file-icons
Published
2025-02-21
Title
File Icons <= 2.1 - Reflected Cross-Site Scripting
Slug
file-manager
Published
2017-03-01
Title
File Manager <= 4.1.4 - Cross-Site Request Forgery (CSRF) Arbitrary File Upload
Slug
file-manager
Published
2018-03-02
Title
File Manager < 5.0.2 - Information Disclosure
Slug
file-manager
Published
2022-03-14
Title
Library File Manager < 5.2.3 - Subscriber+ Arbitrary File Creation/Upload/Deletion
Slug
file-manager
Published
2023-11-20
Title
File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal
Slug
file-manager
Published
2024-09-04
Title
Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition
Slug
file-manager
Published
2024-09-09
Title
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress < 6.5.6 - Authenticated (Subscriber+) Arbitrary File Upload