WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Arbitrary Post Deletion
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Test Email Sending
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to New Category Creation
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Cross-Site Request Forgery to Arbitrary Post Deletion
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Post Modification
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Category Deletion
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Enable/Disable Dark Mode
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Cross-Site Request Forgery to Arbitrary Post Duplication
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Arbitrary Post Duplication
Slug
funnelforms-free
Published
2024-08-27
Title
Funnelforms Free < 3.7.4.1 - Authenticated (Administrator+) Arbitrary File Deletion
Slug
funnelforms-free
Published
2024-08-27
Title
Funnelforms Free < 3.7.4.1 - Authenticated (Administrator+) Arbitrary File Upload
Slug
funnelforms-free
Published
2024-08-27
Title
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free < 3.7.4.1 - Missing Authorization to Unauthenticated Arbitrary Media Upload
Slug
funnelforms-free
Published
2024-08-28
Title
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free < 3.7.4.1 - Missing Authorization to Unauthenticated Arbitrary Media Deletion
Slug
funnelforms-free
Published
2024-12-03
Title
Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection
Slug
funnelforms-free
Published
2025-12-31
Title
Funnelforms Free <= 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
funnelforms-free
Published
2025-12-25
Title
Funnelforms Free <= 3.8 - Missing Authorization
Slug
funnelkit-stripe-woo-payment-gateway
Published
2026-06-26
Title
FunnelKit Payment Gateway for Stripe WooCommerce < 1.14.0.4 - Cross-Site Request Forgery
Slug
furikake
Published
2018-01-01
Title
furikake - Unauthenticated Open Redirect
Slug
furnob-core
Published
2023-12-07
Title
Multiple Plugins by KlbTheme - Reflected Cross-Site Scripting
Slug
fuse-social-floating-sidebar
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
fuse-social-floating-sidebar
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
fuse-social-floating-sidebar
Published
2024-08-07
Title
Fuse Social Floating Sidebar < 5.4.11 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
Slug
fusedesk
Published
2025-02-11
Title
FuseDesk < 6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fusedesk
Published
2025-04-23
Title
FuseDesk < 6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via successredirect Parameter
Slug
fusedesk
Published
2026-03-20
Title
FuseDesk < 6.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'emailtext' Shortcode Attribute