WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
getgenie
Published
2026-01-15
Title
GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools < 4.3.1 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion
Slug
getgenie
Published
2026-01-05
Title
GetGenie < 4.3.1 - Missing Authorization
Slug
getgenie
Published
2026-03-12
Title
GetGenie < 4.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Stored Cross-Site Scripting via REST API
Slug
getgenie
Published
2026-03-12
Title
GetGenie < 4.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Post Overwrite/Deletion
Slug
getgenie
Published
2026-06-15
Title
GetGenie – AI Content Writer with Keyword Research & SEO Tracking < 4.4.2 - Unauthenticated Information Exposure
Slug
getgenie
Published
2026-06-26
Title
GetGenie – AI Content Writer with Keyword Research & SEO Tracking < 4.4.3 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
getgenie
Published
2026-07-27
Title
GetGenie < 4.5.0 - Unauthenticated Stored Cross-Site Scripting
Slug
getresponse
Published
2024-10-17
Title
GetResponse Forms by Optin Cat < 2.5.8 - Reflected Cross-Site Scripting
Slug
getresponse
Published
2025-09-22
Title
GetResponse Forms < 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
getresponse-integration
Published
2022-09-01
Title
GetResponse < 5.5.21 - API Key Update via CSRF
Slug
getresponse-integration
Published
2023-02-21
Title
GetResponse for WordPress < 5.5.32 - Contributor+ Stored XSS
Slug
getresponse-integration
Published
2024-03-29
Title
GetResponse for WordPress <= 5.5.35 - Contributor+ Stored XSS
Slug
getresponse-official
Published
2025-09-25
Title
Email marketing for WordPress by GetResponse Official < 1.5.4 - Authenticated (Subscriber+) Information Exposure
Slug
getresponse-official
Published
2025-09-25
Title
Email marketing for WordPress by GetResponse Official < 1.5.4 - Missing Authorization
Slug
getshop-ecommerce
Published
2025-03-17
Title
GetShop ecommerce <= 1.3 - Unauthenticated Local File Inclusion
Slug
getsocial
Published
2025-03-12
Title
GetSocial <= 2.0.1 - Reflected Cross-Site Scripting
Slug
gettext-override-translations
Published
2022-08-29
Title
Gettext override translations < 2.0.0 - Admin+ Stored Cross-Site Scripting
Slug
getty-images
Published
2026-02-13
Title
Getty Images <= 4.1.0 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
getwid
Published
2023-06-06
Title
Getwid < 1.8.4 - Subscriber+ SSRF
Slug
getwid
Published
2023-12-15
Title
Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin
Slug
getwid
Published
2024-01-17
Title
Getwid – Gutenberg Blocks < 2.0.5 - Missing Authorization to Recaptcha API Key Modification
Slug
getwid
Published
2024-01-17
Title
Getwid – Gutenberg Blocks < 2.0.5 - Captcha Bypass
Slug
getwid
Published
2024-03-21
Title
Getwid – Gutenberg Blocks < 2.0.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content
Slug
getwid
Published
2024-04-26
Title
Getwid – Gutenberg Blocks < 2.0.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'
Slug
getwid
Published
2024-07-19
Title
Getwid – Gutenberg Blocks < 2.0.11 - Missing Authentication to MailChimp API key update