WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
get-cash
Published
2025-12-01
Title
Get Cash <= 3.2.3 - Missing Authorization
Slug
get-custom-field-values
Published
2021-11-09
Title
Get Custom Field Values < 4.0.1 - Contributor+ Stored Cross-Site Scripting
Slug
get-custom-field-values
Published
2021-11-09
Title
Get Custom Field Values < 4.0 - Contributors+ Arbitrary Post Metadata Access
Slug
get-custom-field-values
Published
2023-10-18
Title
Get Custom Field Values < 4.1 - Admin+ Stored XSS
Slug
get-directions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
get-directions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
get-post-content-shortcode
Published
2024-12-13
Title
Get Post Content Shortcode <= 0.4 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via post_content Shortcode
Slug
get-post-custom-taxonomy-term-shortcode
Published
2021-07-05
Title
Advanced Post Listing Shortcode <= 2.8 - CSRF Bypass
Slug
get-site-to-phone-by-qr-code
Published
2022-11-03
Title
Showing URL in QR Code <= 0.0.1 - Stored XSS via CSRF
Slug
get-your-number
Published
2023-05-12
Title
Get Your Number <= 1.1.3 - Admin+ Stored XSS
Slug
get-youtube-subs
Published
2025-07-23
Title
Get Youtube Subs <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via subscribe_link_att Function
Slug
getastra
Published
2025-04-01
Title
Astra Security Suite <= 0.2 - Missing Authorization
Slug
getastra
Published
2025-11-10
Title
Astra Security Suite <= 0.2 - Unauthenticated Arbitrary File Upload
Slug
getcontentfromurl
Published
2026-01-13
Title
GetContentFromURL <= 1.0 - Authenticated (Contributor+) Server-Side Request Forgery via 'url' Shortcode Attribute
Slug
getgenie
Published
2026-01-15
Title
GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools < 4.3.1 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion
Slug
getgenie
Published
2026-01-05
Title
GetGenie < 4.3.1 - Missing Authorization
Slug
getgenie
Published
2026-03-12
Title
GetGenie < 4.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Stored Cross-Site Scripting via REST API
Slug
getgenie
Published
2026-03-12
Title
GetGenie < 4.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Post Overwrite/Deletion
Slug
getresponse
Published
2024-10-17
Title
GetResponse Forms by Optin Cat < 2.5.8 - Reflected Cross-Site Scripting
Slug
getresponse
Published
2025-09-22
Title
GetResponse Forms < 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
getresponse-integration
Published
2022-09-01
Title
GetResponse < 5.5.21 - API Key Update via CSRF
Slug
getresponse-integration
Published
2023-02-21
Title
GetResponse for WordPress < 5.5.32 - Contributor+ Stored XSS
Slug
getresponse-integration
Published
2024-03-29
Title
GetResponse for WordPress <= 5.5.35 - Contributor+ Stored XSS
Slug
getresponse-official
Published
2025-09-25
Title
Email marketing for WordPress by GetResponse Official < 1.5.4 - Authenticated (Subscriber+) Information Exposure
Slug
getresponse-official
Published
2025-09-25
Title
Email marketing for WordPress by GetResponse Official < 1.5.4 - Missing Authorization