WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fw-anker
Published
2025-09-05
Title
FW Anker <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fw-food-menu
Published
2025-06-12
Title
FW Food Menu <= 6.0.0 - Unauthenticated Arbitrary File Upload
Slug
fw-food-menu
Published
2025-06-24
Title
FW Food Menu <= 6.0.0 - Unauthenticated Arbitrary File Deletion
Slug
fw-gallery
Published
2025-06-10
Title
FW Gallery <= 8.0.0 - Unauthenticated Arbitrary File Deletion
Slug
fw-gallery
Published
2025-06-25
Title
FW Gallery <= 8.0.0 - Unauthenticated Local File Inclusion
Slug
fw-gallery
Published
2025-06-30
Title
FW Gallery <= 8.0.0 - Unauthenticated Arbitrary File Upload
Slug
fw-integration-for-emailoctopus
Published
2025-01-03
Title
EO4WP < 1.0.8.2 - Contributor+ Stored XSS
Slug
fw-integration-for-emailoctopus
Published
2025-03-27
Title
EO4WP < 1.0.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fwd-slider
Published
2025-01-16
Title
FWD Slider <= 1.0 - Reflected Cross-Site Scripting
Slug
fwdmsp
Published
2024-11-22
Title
MP3 Sticky Player < 8.0 - Unauthenticated Arbitrary File Read/Download
Slug
fwduvp
Published
2025-03-06
Title
Ultimate Video Player < 10.1 - Unauthenticated Arbitrary File Download
Slug
fwduvp
Published
2025-08-15
Title
Ultimate Video Player <= 10.1 - Missing Authorization
Slug
fwduvp
Published
2025-07-10
Title
Ultimate Video Player WordPress & WooCommerce Plugin <= 10.1 - Unauthenticated Server-Side Request Forgery
Slug
fws-ajax-contact-form
Published
2025-01-14
Title
Ajax Contact Form < 1.4.2 - Contributor+ Stored XSS
Slug
fx-calculators
Published
2025-01-31
Title
Forex Calculators < 1.3.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
fx-calculators
Published
2025-02-27
Title
Forex Calculators < 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
fx-currency-converter
Published
2025-12-11
Title
FX Currency Converter < 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
fx-private-site
Published
2024-03-11
Title
f(x) Private Site <= 1.2.1 - Sensitive Information Exposure
Slug
fx-toc
Published
2023-04-18
Title
f(x) TOC <= 1.1.0 - Contributor+ Stored XSS
Slug
fyrebox-shortcode
Published
2025-02-03
Title
Fyrebox Quizzes <= 3.1 - Stored XSS via CSRF
Slug
fyrebox-shortcode
Published
2025-06-19
Title
Fyrebox Quizzes <= 3.1 - Contributor+ Stored XSS