WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
formstack
Published
2025-12-05
Title
Formstack Online Forms <= 2.0.2 - Missing Authorization
Slug
formularios-de-contacto-salesup
Published
2025-05-20
Title
Formulario de contacto SalesUp! <= 1.0.14 - Reflected Cross-Site Scripting
Slug
formzu-wp
Published
2023-11-28
Title
Formzu WP < 1.6.7 - Contributor+ Stored XSS via id
Slug
formzu-wp
Published
2024-01-19
Title
Formzu WP < 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fortis-for-woocommerce
Published
2026-02-03
Title
Fortis for WooCommerce < 1.3.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Update to Paid via 'wc-api' Endpoint
Slug
fortis-for-woocommerce
Published
2026-04-28
Title
Fortis For WooCommerce < 1.3.1 - Sensitive API Key Disclosure
Slug
forty-four
Published
2024-05-06
Title
Forty Four – 404 Plugin for WordPress <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server <= 1.7.3 - wpf-insert.php edit_post_id Parameter SQL Injection
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server <= 1.7.3 - fs-admin/wpf-add-forum.php groupid Parameter XSS
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server <= 1.7.3 - fs-admin/fs-admin.php Multiple Parameter XSS
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server <= 1.7 - SQL Injection
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server 1.6.5 - feed.php topic Parameter SQL Injection
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server 1.6.5 - index.php Multiple Parameter SQL Injection
Slug
forum-server
Published
2025-06-27
Title
WP Forum Server <= 1.8.2 - Cross-Site Request Forgery
Slug
forum-server
Published
2025-06-27
Title
WP Forum Server <= 1.8.2 - Authenticated (Administrator+) SQL Injection
Slug
forumconverter
Published
2014-08-01
Title
ForumConverter - SQL Injection
Slug
forumwp
Published
2024-09-06
Title
ForumWP – Forum & Discussion Board Plugin < 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Slug
forumwp
Published
2024-12-05
Title
ForumWP < 2.1.3 - Reflected Cross-Site Scripting
Slug
forumwp
Published
2024-12-05
Title
ForumWP < 2.1.3 - Reflected Cross-Site Scripting via url Parameter
Slug
forumwp
Published
2024-12-11
Title
ForumWP < 2.1.1 - Unauthenticated PHP Object Injection
Slug
forumwp
Published
2025-11-21
Title
ForumWP < 2.1.5 - Missing Authorization
Slug
forumwp
Published
2026-01-05
Title
ForumWP – Forum & Discussion Board < 2.1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name
Slug
forym
Published
2022-09-27
Title
Forym <= 1.5.8 - Reflected Cross-Site Scripting
Slug
fossura-tag-miner
Published
2015-08-18
Title
Tag Miner < 1.1.5 - Cross-Site Request Forgery (CSRF) & XSS
Slug
fotobook
Published
2022-01-31
Title
Fotobook <= 3.2.3 - Reflected Cross-Site Scripting