WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fulltext-search
Published
2026-06-29
Title
WP Fast Total Search – The Power of Indexed Search < 1.81.282 - Unauthenticated SQL Injection
Slug
fulltext-search
Published
2026-07-22
Title
WP Fast Total Search – The Power of Indexed Search < 1.81.284 - Missing Authorization
Slug
fulltext-search
Published
2026-07-27
Title
WP Fast Total Search < 1.81.282 - Unauthenticated SQL Injection
Slug
fullworks-anti-spam
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
fullworks-anti-spam
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
fullworks-anti-spam
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
fullworks-directory
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
fullworks-directory
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
fullworks-firewall
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
fullworks-firewall
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
fullworks-ice-ide-integration
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
fullworks-ice-ide-integration
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
fullworks-pricing-tables
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
fullworks-pricing-tables
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
fullworks-slack
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
fullworks-slack
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
funcaptcha
Published
2014-08-01
Title
FunCaptcha 0.3.2- Setting Manipulation CSRF
Slug
funcaptcha
Published
2014-08-01
Title
FunCaptcha 0.4.3 - wp_funcaptcha_admin_activate.php URI XSS
Slug
fundpress
Published
2025-01-20
Title
FundPress < 2.0.7 - Unauthenticated PHP Object Injection
Slug
fundpress
Published
2026-05-01
Title
FundPress < 2.0.9 - Missing Authorization to Unauthenticated Arbitrary Donation Status Modification via donate_action_status AJAX Handler
Slug
funkitools
Published
2025-10-14
Title
FunKItools <= 1.0.2 - Cross-Site Request Forgery to Settings Update
Slug
funnel-builder
Published
2023-12-21
Title
Funnel Builder for WordPress by FunnelKit < 2.14.4 - Authenticated(Administrator+) SQL Injection
Slug
funnel-builder
Published
2024-06-28
Title
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells < 3.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Slug
funnel-builder
Published
2024-07-23
Title
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells < 3.4.7 - Missing Authorization to Authenticated (Contributor+) Settings Update
Slug
funnel-builder
Published
2025-02-23
Title
Funnel Builder by FunnelKit < 3.9.1 - Unauthenticated Local File Inclusion