WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
foxypress
Published
2014-08-01
Title
FoxyPress 0.4.2.5-0.4.2.8 - Multiple Vulnerabilities
Slug
foxyshop
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
foxyshop
Published
2022-06-16
Title
FoxyShop < 4.8.2 - Reflected Cross-Site Scripting
Slug
foyer
Published
2023-11-07
Title
Foyer <= 1.7.5 - Content Injection via Improper Access Control
Slug
fp-rss-category-excluder
Published
2025-01-16
Title
FP RSS Category Excluder <= 1.0.0 - Reflected Cross-Site Scripting
Slug
fpw-category-thumbnails
Published
2025-04-03
Title
FPW Category Thumbnails <= 1.9.5 - Missing Authorization
Slug
fraudlabs-pro-for-woocommerce
Published
2025-04-09
Title
FraudLabs Pro for WooCommerce < 2.22.9 - Stored XSS via CSRF
Slug
fraudlabs-pro-for-woocommerce
Published
2025-06-05
Title
FraudLabs Pro for WooCommerce < 2.22.12 - Missing Authorization
Slug
fraudlabs-pro-sms-verification
Published
2024-11-01
Title
FraudLabs Pro SMS Verification < 1.10.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
free-comments-for-wordpress-vuukle
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Slug
free-counter
Published
2015-05-25
Title
Free Counter 1.1 - Cross-Site Scripting (XSS)
Slug
free-download-manager
Published
2024-10-15
Title
FREE DOWNLOAD MANAGER <= 1.0.0 - Unauthenticated Arbitrary File Download
Slug
free-downloads-edd
Published
2025-06-27
Title
Free Downloads EDD <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
free-event-banner
Published
2021-04-10
Title
Event Banner <= 1.3 - Arbitrary File Upload to RCE
Slug
free-facebook-reviews-and-recommendations-widgets
Published
2023-11-22
Title
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Slug
free-google-fonts
Published
2023-05-30
Title
Google Fonts For WordPress < 3.0.1 - Reflected XSS
Slug
free-product-sample
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
free-product-sample
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
free-product-table-for-woocommerce
Published
2025-04-02
Title
Free Woocommerce Product Table View <= 1.78 - Missing Authorization to Arbitrary Content Deletion
Slug
free-product-table-for-woocommerce
Published
2025-04-01
Title
Free Woocommerce Product Table View <= 1.78 - Missing Authorization
Slug
free-quotation
Published
2025-11-03
Title
Free Quotation <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
free-sales-funnel-squeeze-pages-landing-page-builder-templates-make
Published
2020-04-07
Title
WP Lead Plus X < 0.99 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
free-sales-funnel-squeeze-pages-landing-page-builder-templates-make
Published
2020-04-07
Title
WP Lead Plus X < 0.99 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
free-sales-funnel-squeeze-pages-landing-page-builder-templates-make
Published
2020-04-07
Title
WP Lead Plus X <= 0.99 - Multiple Cross-Site Request Forgery (CSRF)
Slug
free-shipping-label
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting