WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server <= 1.7.3 - fs-admin/fs-admin.php Multiple Parameter XSS
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server <= 1.7 - SQL Injection
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server 1.6.5 - feed.php topic Parameter SQL Injection
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server 1.6.5 - index.php Multiple Parameter SQL Injection
Slug
forum-server
Published
2025-06-27
Title
WP Forum Server <= 1.8.2 - Cross-Site Request Forgery
Slug
forum-server
Published
2025-06-27
Title
WP Forum Server <= 1.8.2 - Authenticated (Administrator+) SQL Injection
Slug
forumconverter
Published
2014-08-01
Title
ForumConverter - SQL Injection
Slug
forumwp
Published
2024-09-06
Title
ForumWP – Forum & Discussion Board Plugin < 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Slug
forumwp
Published
2024-12-05
Title
ForumWP < 2.1.3 - Reflected Cross-Site Scripting
Slug
forumwp
Published
2024-12-05
Title
ForumWP < 2.1.3 - Reflected Cross-Site Scripting via url Parameter
Slug
forumwp
Published
2024-12-11
Title
ForumWP < 2.1.1 - Unauthenticated PHP Object Injection
Slug
forumwp
Published
2025-11-21
Title
ForumWP < 2.1.5 - Missing Authorization
Slug
forumwp
Published
2026-01-05
Title
ForumWP – Forum & Discussion Board < 2.1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name
Slug
forym
Published
2022-09-27
Title
Forym <= 1.5.8 - Reflected Cross-Site Scripting
Slug
fossura-tag-miner
Published
2015-08-18
Title
Tag Miner < 1.1.5 - Cross-Site Request Forgery (CSRF) & XSS
Slug
fotobook
Published
2022-01-31
Title
Fotobook <= 3.2.3 - Reflected Cross-Site Scripting
Slug
fotomoto
Published
2023-10-17
Title
Fotomoto <= 1.2.8 - Reflected XSS
Slug
foton-core
Published
2026-08-11
Title
Foton Core <= 1.1.1 - Unauthenticated Local File Inclusion
Slug
foundation-columns
Published
2025-01-14
Title
Foundation Columns <= 0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
foursquare-checkins
Published
2014-08-01
Title
foursquare-checkins - CSRF
Slug
fox-lms
Published
2025-12-15
Title
Fox LMS 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'
Slug
fox-lms
Published
2026-02-07
Title
Fox LMS < 1.0.6.4 - Authenticated (Contributor+) SQL Injection
Slug
foxtool
Published
2025-12-11
Title
Foxtool All-in-One: Contact chat button, Custom login, Media optimize images < 2.5.3 - Cross-Site Request Forgery to Google OAuth Connection
Slug
foxtool
Published
2026-09-17
Title
Foxtool All-in-One: Contact chat button, Custom login, Media optimize images < 2.5.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification via 'option_key' Parameter of toggle_watermark AJAX Action
Slug
foxypress
Published
2014-08-01
Title
Foxypress 0.4.1.1-0.4.2.1 - Arbitrary File Upload