WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
flexi
Published
2025-10-02
Title
Flexi <= 4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode
Slug
flexi-product-slider-grid
Published
2026-02-13
Title
Flexi Product Slider and Grid for WooCommerce <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion via 'theme' Shortcode Attribute
Slug
flexi-quote-rotator
Published
2014-08-01
Title
Flexi Quote Rotator - Cross-Site Request Forgery & SQL Injection Vulnerabilities
Slug
flexi-quote-rotator
Published
2022-07-06
Title
Flexi Quote Rotator <= 0.9.4 - Admin+ Stored Cross-Site Scripting
Slug
flexible-blogtitle
Published
2025-01-16
Title
Flexible Blogtitle <= 0.1 - Reflected Cross-Site Scripting
Slug
flexible-captcha
Published
2023-01-11
Title
Flexible Captcha <= 4.1 - Contributor+ Stored XSS
Slug
flexible-checkout-fields
Published
2020-02-25
Title
Flexible Checkout Fields for WooCommerce < 2.3.2 - Unauthenticated Settings Update
Slug
flexible-checkout-fields
Published
2024-04-05
Title
Flexible Checkout Fields for WooCommerce < 4.1.3 - Missing Authorization
Slug
flexible-cookies
Published
2025-03-27
Title
Flexible Cookies < 1.1.9 - Cross-Site Request Forgery
Slug
flexible-coupons
Published
2025-01-15
Title
Flexible PDF Coupons < 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
flexible-custom-post-type
Published
2011-11-17
Title
Flexible Custom Post Type < 0.1.7 - XSS
Slug
flexible-faq
Published
2025-09-22
Title
Flexible FAQ <= 0.2 - Cross-Site Request Forgery
Slug
flexible-faqs
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
flexible-faqs
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
flexible-invoices
Published
2025-09-22
Title
Flexible PDF Invoices for WooCommerce & WordPress < 6.0.14 - Cross-Site Request Forgery
Slug
flexible-refund-and-return-order-for-woocommerce
Published
2025-10-21
Title
Flexible Refund and Return Order for WooCommerce < 1.0.39 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Refund
Slug
flexible-refund-and-return-order-for-woocommerce
Published
2025-11-07
Title
Flexible Refund and Return Order for WooCommerce < 1.0.43 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update
Slug
flexible-refund-and-return-order-for-woocommerce
Published
2026-07-08
Title
Flexible Refund for WooCommerce – EU One Click Return < 1.0.52 - Authenticated (Customer+) Stored Cross-Site Scripting
Slug
flexible-shipping
Published
2022-06-14
Title
Flexible Shipping < 4.11.9 - Reflected Cross-Site Scripting
Slug
flexible-shipping
Published
2024-04-22
Title
Flexible Shipping < 4.24.16 - Missing Authorization
Slug
flexible-shipping-ups
Published
2024-04-11
Title
WooCommerce UPS Shipping – Live Rates and Access Points < 2.2.5 - Cross-Site Request Forgery
Slug
flexible-shipping-ups
Published
2024-10-24
Title
UPS Live Rates and Access Points < 3.0.0 - Missing Authorization to Plugin API key reset
Slug
flexible-shipping-usps
Published
2024-04-10
Title
USPS Shipping for WooCommerce – Live Rates < 1.9.3 - Cross-Site Request Forgery
Slug
flexible-shipping-usps
Published
2024-04-22
Title
USPS Shipping for WooCommerce – Live Rates < 1.10.0 - Sensitive Information Exposure
Slug
flexible-wishlist
Published
2025-01-28
Title
Flexible Wishlist for WooCommerce < 1.2.26 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter