WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
flagged-content
Published
2025-02-21
Title
Flagged Content <= 1.0.2 - Reflected Cross-Site Scripting
Slug
flags-widget
Published
2025-04-09
Title
Flags Widget <= 1.0.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
flaming-forms
Published
2024-08-12
Title
Flaming Forms <= 1.0.1 - Unauthenticated Stored XSS
Slug
flaming-forms
Published
2024-08-12
Title
Flaming Forms <= 1.0.1 - Reflected XSS
Slug
flaming-forms
Published
2024-12-12
Title
Flaming Forms <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
flaming-password-reset
Published
2025-12-29
Title
Flaming Password Reset <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting
Slug
flamingo
Published
2020-01-15
Title
Flamingo < 2.1.1 - CSV Injection
Slug
flamix-bitrix24-and-contact-forms-7-integrations
Published
2024-08-20
Title
Flamix: Bitrix24 and Contact Form 7 integrations < 3.2.0 - Unauthenticated Full Path Disclosure
Slug
flash-album-gallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery 2.70- "s" Cross-Site Scripting
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery 2.55 - "gid" SQL Injection
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery - Multiple Vulnerabilities
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery 1.9.0 & 2.0.0 - Multiple Vulnerabilities
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery < 1.76 - Reflected Cross-Site Scripting via wp-admin/admin.php skin parameter
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery < 1.67 - Reflected Cross-Site Scripting
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery 0.55 - lib/hitcounter.php pid Parameter SQL Injection
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery 0.55 - admin/news.php want2Read Parameter Traversal Arbitrary File Access
Slug
flash-album-gallery
Published
2014-10-30
Title
Flagallery Photo Portfolio < 4.25 - Full Path Disclosure
Slug
flash-album-gallery
Published
2021-11-12
Title
GRAND FlaGallery <= 6.1.2 - Admin+ Stored Cross-Site Scripting
Slug
flash-photo-gallery
Published
2014-04-25
Title
Flash Photo Gallery <= 0.7 - XSS
Slug
flash-player-widget
Published
2014-08-01
Title
Flash Player Widget - dewplayer.swf Content Spoofing
Slug
flash-show-and-hide-box
Published
2024-11-01
Title
Flash Show And Hide Box <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
flash-video-player
Published
2024-04-15
Title
Flash Video Player <= 5.0.4 - Cross-Site Request Forgery
Slug
flashcard
Published
2026-01-06
Title
Flashcard Plugin for WordPress <= 0.9 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal
Slug
flashcounter
Published
2025-01-27
Title
FlashCounter <= 1.1.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting