WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fb-reviews-widget
Published
2025-12-08
Title
Social Reviews & Recommendations < 2.6 - Unauthenticated Stored Cross-Site Scripting via Social Media Reviews
Slug
fb-status-updater
Published
2025-02-03
Title
Status Updater <= 1.9.2 - Reflected Cross-Site Scripting
Slug
fb2wp-integration-tools
Published
2025-10-17
Title
XX2WP Integration Tools < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fbgorilla
Published
2014-09-19
Title
FB Gorilla - SQL Injection
Slug
fbpromotions
Published
2014-08-01
Title
Facebook Promotions <= 1.3.3 - SQL Injection
Slug
fbsurveypro
Published
2014-08-01
Title
fbsurveypro - XSS
Slug
fcchat
Published
2012-01-06
Title
FCChat 2.2.11-2.2.13 - Upload.php Arbitrary File Upload
Slug
fd-elementor-button-plus
Published
2024-11-28
Title
Elementor Button Plus <= 1.3.9 - Contributor+ Stored XSS
Slug
fd-elementor-imagebox
Published
2024-04-29
Title
Elementor ImageBox <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
feather-login-page
Published
2023-05-30
Title
Feather Login Page < 1.1.2 - Cross-Site Request Forgery to Privilege Escalation
Slug
feather-login-page
Published
2023-05-30
Title
Feather Login Page < 1.1.2 - Missing Authorization to Non-Arbitrary User Deletion
Slug
feather-login-page
Published
2023-05-30
Title
Feather Login Page < 1.1.2 - Missing Authorization to Authentication Bypass and Privilege Escalation
Slug
feather-login-page
Published
2023-11-06
Title
Feather Login Page < 1.1.4 - CSRF
Slug
feather-login-page
Published
2024-04-10
Title
Feather Login Page < 1.1.6 - Cross-Site Request Forgery via saveData()
Slug
feather-login-page
Published
2025-11-05
Title
Feather Login Page <= 1.1.7 - Cross-Site Request Forgery
Slug
feature-comments
Published
2014-08-01
Title
Featured Comments 1.2.1 - wp-admin/admin-ajax.php Comment Status Manipulation CSRF
Slug
featured-content-gallery
Published
2024-05-06
Title
Featured Content Gallery <= 3.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
featured-image
Published
2025-11-10
Title
Featured Image < 2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
featured-image-caption
Published
2023-11-06
Title
Featured Image Caption < 0.8.11 - Contributor+ Stored XSS
Slug
featured-image-from-url
Published
2019-12-24
Title
Featured Image from URL <= 2.7.7 - Missing Access Controls on REST routes
Slug
featured-image-from-url
Published
2022-07-11
Title
Featured Image from URL < 4.0.1 - Admin+ Stored Cross-Site Scripting
Slug
featured-image-from-url
Published
2022-07-11
Title
Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
featured-image-from-url
Published
2023-12-14
Title
Featured Image from URL (FIFU) < 4.5.4 - Contributor+ Stored XSS
Slug
featured-image-from-url
Published
2024-02-19
Title
Featured Image from URL (FIFU) < 4.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url
Slug
featured-image-from-url
Published
2024-06-28
Title
Featured Image from URL < 4.8.2 - Missing Authorization