WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fastdup
Published
2024-01-15
Title
FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure
Slug
fastdup
Published
2026-01-05
Title
FastDup < 2.7.1 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter
Slug
fastdup
Published
2026-02-11
Title
FastDup – Fastest WordPress Migration & Duplicator < 2.7.2 - Contributor+ Backup Creation and Download
Slug
fastly
Published
2024-05-17
Title
Fastly < 1.2.26 - Missing Authorization via AJAX actions
Slug
fastly
Published
2024-05-20
Title
Fastly < 1.2.26 - Missing Authorization
Slug
fastly
Published
2025-09-22
Title
Fastly < 1.2.29 - Cross-Site Request Forgery
Slug
fastspring
Published
2025-05-30
Title
FastSpring <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fat-coming-soon
Published
2025-04-09
Title
FAT Cooming Soon <= 1.1 - Unauthenticated Local File Inclusion
Slug
fat-event-lite
Published
2025-01-07
Title
FAT Event Lite <= 1.1 - Unauthenticated Local File Inclusion
Slug
fat-event-lite
Published
2025-01-15
Title
FAT Event Lite <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fat-event-lite
Published
2025-01-16
Title
FAT Event Lite <= 1.1 - Authenticated (Contributor+) Local File Inclusion
Slug
fat-rat-collect
Published
2024-11-12
Title
Fat Rat Collect < 2.7.4 - Reflected Cross-Site Scripting
Slug
fat-services-booking
Published
2024-12-02
Title
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
fat-services-booking
Published
2024-12-02
Title
FAT Services Booking <= 5.6 - Unauthenticated SQL Injection
Slug
fat-services-booking
Published
2025-04-21
Title
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) SQL Injection
Slug
fat-services-booking
Published
2025-05-16
Title
FAT Services Booking <= 5.5 - Authenticated (Contributor+) Local File Inclusion
Slug
fatal-error-notify
Published
2024-01-30
Title
Fatal Error Notify < 1.5.3 - Subscriber+ Test Error Email Sending
Slug
fathom-analytics
Published
2021-12-08
Title
Fathom Analytics < 3.0.5 - Admin+ Stored Cross-Site Scripting
Slug
fathom-analytics
Published
2023-10-25
Title
Fathom Analytics < 3.1.0 - Admin+ Stored XSS
Slug
fattura24
Published
2023-10-09
Title
Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
Slug
favicon-by-realfavicongenerator
Published
2015-04-01
Title
Favicon by RealFaviconGenerator <= 1.2.12 - Cross-Site Scripting (XSS)
Slug
favicon-by-realfavicongenerator
Published
2021-07-27
Title
Favicon by RealFaviconGenerator < 1.3.22 - Reflected Cross-Site Scripting (XSS)
Slug
favicon-by-realfavicongenerator
Published
2022-03-21
Title
Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting
Slug
favicon-generator
Published
2024-08-23
Title
Favicon Generator < 2.1 - Arbitrary File Upload via CSRF
Slug
favicon-generator
Published
2024-08-23
Title
Favicon Generator < 2.1 - Arbitrary File Deletion via CSRF