WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fast-search-powered-by-solr
Published
2023-05-12
Title
Sunny Search <= 1.0.2 - Settings Update via CSRF
Slug
fast-tube
Published
2025-01-10
Title
Fast Tube <= 2.3.1 - Reflected XSS
Slug
fast-tube
Published
2025-01-16
Title
Fast Tube <= 2.3.1 - Reflected Cross-Site Scripting
Slug
fast-user-switching
Published
2025-12-25
Title
Fast User Switching <= 1.4.10 - Cross-Site Request Forgery
Slug
fast-velocity-minify
Published
2019-10-16
Title
Fast Velocity Minify < 2.7.7 - Full Path Disclosure
Slug
fast-velocity-minify
Published
2025-10-24
Title
Fast Velocity Minify < 3.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
fast-velocity-minify
Published
2026-10-30
Title
Fast Velocity Minify < 3.5.8 - Unauthenticated Stored Cross-Site Scripting
Slug
fast-video-and-image-display
Published
2024-11-08
Title
Fast Video and Image Display <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fast-wp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
fast-wp
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
fast-wp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
fast-wp-speed
Published
2023-10-12
Title
Fast WP Speed <= 1.0.0 - Reflected XSS
Slug
fastbook-responsive-appointment-booking-and-scheduling-system
Published
2024-11-28
Title
FastBook – Responsive Appointment Booking and Scheduling System <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
fastbook-responsive-appointment-booking-and-scheduling-system
Published
2025-06-05
Title
FastBook <= 1.1 - Cross-Site Request Forgery
Slug
fastbook-responsive-appointment-booking-and-scheduling-system
Published
2025-06-18
Title
FastBook <= 1.1 - Reflected Cross-Site Scripting
Slug
fastbots-ai-chatbots
Published
2026-05-11
Title
FastBots < 1.0.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
Slug
fastcache-by-host-it
Published
2026-10-16
Title
Fastcache by Host.it < 1.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary .htaccess Page-Cache Block Modification via updateSettings() admin_action_update Hook
Slug
fastcache-by-host-it
Published
2026-10-09
Title
Fastcache by Host.it < 1.7.5 - Authenticated (Administrator+) Code Injection via .htaccess Directive Injection via 'cache_cookie_exclude' Setting
Slug
fastcgi-cache-purge-and-preload-nginx
Published
2025-07-21
Title
Nginx Cache Purge Preload < 2.1.3 - Authenticated (Administrator+) Remote Code Execution
Slug
fastdup
Published
2023-12-27
Title
FastDup < 2.1.8 - Sensitive Information Exposure via Log File
Slug
fastdup
Published
2024-01-15
Title
FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure
Slug
fastdup
Published
2026-01-05
Title
FastDup < 2.7.1 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter
Slug
fastdup
Published
2026-02-11
Title
FastDup – Fastest WordPress Migration & Duplicator < 2.7.2 - Contributor+ Backup Creation and Download
Slug
fastdup
Published
2026-06-12
Title
FastDup – Fastest WordPress Migration & Duplicator < 2.7.3 - Unauthenticated Path Traversal
Slug
fastly
Published
2024-05-17
Title
Fastly < 1.2.26 - Missing Authorization via AJAX actions