WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
flight-search-widget-blocks
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
flight-search-widget-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
flight-search-widget-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
flightlog
Published
2021-05-19
Title
FlightLog <= 3.0.2 - Authenticated (editor+) SQL Injection
Slug
flip-boxes
Published
2025-04-10
Title
Cool Flipbox – Shortcode & Gutenberg Block < 1.9.0 - Reflected Cross-Site Scripting
Slug
flipbook
Published
2014-08-01
Title
Flip Book 1.0 - Shell Upload
Slug
flipbox-builder
Published
2024-07-26
Title
Flipbox Builder <= 1.5 - Authenticated (Contributor+) PHP Object Injection
Slug
flipdish-ordering-system
Published
2025-03-24
Title
Flipdish Ordering System <= 1.5.2 - Cross-Site Request Forgery to Settings Update
Slug
flipping-cards
Published
2024-09-12
Title
Flipping Cards < 1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
flippingbook
Published
2025-12-28
Title
FlippingBook < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
flo-forms
Published
2021-03-16
Title
Flo Forms < 1.0.36 - Authenticated Options Change to Stored XSS
Slug
flo-forms
Published
2023-06-15
Title
Flo Forms < 1.0.41 - Admin+ Stored XSS
Slug
flo-forms
Published
2023-11-09
Title
Flo Forms < 1.0.42 - Subscriber+ Test Email Sending
Slug
flo-forms
Published
2024-05-10
Title
Flo Forms < 1.0.43 - Missing Authorization
Slug
flo-forms
Published
2025-04-07
Title
Flo Forms <= 1.0.43 - Missing Authorization
Slug
flo-forms
Published
2025-11-20
Title
Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload
Slug
flo-launch
Published
2022-03-29
Title
Flo Launch < 2.4.1 - Missing Authentication Allow Full Site Takeover
Slug
float-block
Published
2024-12-06
Title
Float Block <= 1.9 - Admin+ Stored XSS via Widget
Slug
float-gateway
Published
2026-01-13
Title
Float Payment Gateway < 1.1.10 - Improper Authorization to Unauthenticated Order Status Manipulation
Slug
float-menu
Published
2022-01-24
Title
Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF
Slug
float-menu
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
float-menu
Published
2023-06-19
Title
Float menu < 5.0.3 - Admin+ Stored Cross-Site Scripting
Slug
float-menu
Published
2024-04-11
Title
Float menu < 6.0.1 - Menu Deletion via CSRF
Slug
float-menu
Published
2025-03-27
Title
Float menu < 6.1.3 - Cross-Site Request Forgery to Settings Update
Slug
float-to-top-button
Published
2022-08-23
Title
Float to Top Button <= 2.3.6 - Admin+ Stored Cross-Site Scripting