WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
flashfader
Published
2025-02-21
Title
Flashfader <= 1.1.1 - Reflected Cross-Site Scripting
Slug
flashnews-fading-effect-pearlbells
Published
2024-12-14
Title
Flash News / Post (Responsive) <= 4.1 - Cross-Site Request Forgery to Privilege Escalation
Slug
flat-preloader
Published
2021-09-28
Title
Flat Preloader < 1.5.5 - Admin+ Stored Cross-Site Scripting
Slug
flat-preloader
Published
2021-09-28
Title
Flat Preloader < 1.5.4 - CSRF to Stored Cross-Site Scripting
Slug
flat-ui-button
Published
2024-10-17
Title
Flat UI Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via flatbtn Shortcode
Slug
flatpm-wp
Published
2022-11-17
Title
Flat PM < 3.0.13 - Reflected Cross-Site Scripting
Slug
flatpm-wp
Published
2024-03-25
Title
FlatPM < 3.1.05 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
flatsome
Published
2025-09-04
Title
Flatsome < 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
flattr
Published
2024-05-02
Title
Flattr <= 1.2.2 - Admin+ Stored XSS
Slug
flatty-flat-admin-theme
Published
2025-03-28
Title
Flatty <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
fleet
Published
2025-11-10
Title
Fleet Manager < 2.6.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
fleetwire-fleet-management
Published
2025-07-22
Title
Fleetwire Fleet Management Plugin < 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via fleetwire_list Shortcode
Slug
flex-guten
Published
2025-08-05
Title
Flex Guten < 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via thumbnailHoverEffect Parameter
Slug
flex-qr-code-generator
Published
2025-10-14
Title
Flex QR Code Generator < 1.2.6 - Unauthenticated Arbitrary File Upload
Slug
flex-qr-code-generator
Published
2025-12-05
Title
Flex QR Code Generator < 1.2.8 - Unauthenticated Arbitrary File Upload
Slug
flex-store-user
Published
2025-12-19
Title
Flex Store Users <= 1.1.0 - Unauthenticated Privilege Escalation
Slug
flexi
Published
2022-02-16
Title
Flexi - Guest Submit < 4.20 - Reflected Cross-Site Scripting
Slug
flexi
Published
2025-04-09
Title
Flexi – Guest Submit <= 4.28 - Unauthenticated Local File Inclusion
Slug
flexi
Published
2025-10-02
Title
Flexi <= 4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode
Slug
flexi-quote-rotator
Published
2014-08-01
Title
Flexi Quote Rotator - Cross-Site Request Forgery & SQL Injection Vulnerabilities
Slug
flexi-quote-rotator
Published
2022-07-06
Title
Flexi Quote Rotator <= 0.9.4 - Admin+ Stored Cross-Site Scripting
Slug
flexible-blogtitle
Published
2025-01-16
Title
Flexible Blogtitle <= 0.1 - Reflected Cross-Site Scripting
Slug
flexible-captcha
Published
2023-01-11
Title
Flexible Captcha <= 4.1 - Contributor+ Stored XSS
Slug
flexible-checkout-fields
Published
2020-02-25
Title
Flexible Checkout Fields for WooCommerce < 2.3.2 - Unauthenticated Settings Update
Slug
flexible-checkout-fields
Published
2024-04-05
Title
Flexible Checkout Fields for WooCommerce < 4.1.3 - Missing Authorization