WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
generate-post-thumbnails
Published
2025-03-24
Title
Generate Post Thumbnails <= 0.8 - Cross-Site Request Forgery
Slug
generateblocks
Published
2021-11-01
Title
GenerateBlocks < 1.4.0 - Contributor+ Stored Cross-Site Scripting
Slug
generateblocks
Published
2024-03-01
Title
GenerateBlocks < 1.8.3 - Contributor+ Arbitrary Draft/Private Post Access
Slug
generateblocks
Published
2025-02-28
Title
GenerateBlocks < 2.0.0 - Authenticated (Contributor+) Sensitive Information Exposure via 'get_image_description'
Slug
generateblocks
Published
2025-10-24
Title
GenerateBlocks < 2.1.2 - Contributor+ Arbitrary Options Disclosure
Slug
generateblocks
Published
2025-12-12
Title
GenerateBlocks < 2.2.0 - Authenticated (Contributor+) Information Exposure via Metadata
Slug
generateblocks
Published
2026-05-04
Title
GenerateBlocks < 2.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements
Slug
generatepress-premium
Published
2024-01-18
Title
GeneratePress Premium < 2.4.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom Meta
Slug
generic-elements-for-elementor
Published
2024-11-22
Title
Generic Elements <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
generic-elements-for-elementor
Published
2025-10-02
Title
Generic Elements <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
generic-elements-for-elementor
Published
2025-12-07
Title
Generic Elements <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
genesis-blocks
Published
2024-03-29
Title
Genesis Blocks < 3.1.3 - Contributor+ Stored XSS
Slug
genesis-blocks
Published
2024-04-01
Title
Genesis Blocks < 3.1.3 - Contributor+ Stored XSS
Slug
genesis-blocks
Published
2024-07-08
Title
Genesis Blocks < 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sharing Block Attributes
Slug
genesis-blocks
Published
2024-04-12
Title
Genesis Blocks < 3.1.4 - Contributor+ Stored XSS
Slug
genesis-club-lite
Published
2025-09-22
Title
Genesis Club Lite <= 1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
genesis-columns-advanced
Published
2022-12-29
Title
Genesis Columns Advanced < 2.0.4 - Contributor+ Stored XSS via Shortcode
Slug
genesis-simple-love
Published
2023-12-05
Title
Genesis Simple Love <= 2.0 - Unauthenticated PHP Object Injection
Slug
genesis-style-shortcodes
Published
2025-01-07
Title
Genesis Style Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
genie-wp-favicon
Published
2021-10-06
Title
Genie WP Favicon <= 0.5.2 - Arbitrary Favicon Change via CSRF
Slug
genki-announcement
Published
2025-01-16
Title
Genki Announcement <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
genki-pre-publish-reminder
Published
2022-05-23
Title
Genki Pre-Publish Reminder <= 1.4.1 - Stored XSS & RCE via CSRF
Slug
genoo
Published
2024-10-31
Title
Genoo < 6.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
genzel-breadcrumbs
Published
2026-05-26
Title
Genzel breadcrumbs <= 1.2 - Cross-Site Request Forgery to Settings Update via Plugin Settings Page
Slug
geo-mashup
Published
2015-01-31
Title
Geo Mashup <= 1.8.2 - Cross-Site Scripting (XSS)