WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
goodbarber
Published
2025-04-16
Title
GoodBarber < 1.0.27 - Open Redirect
Slug
goodlayers-blocks
Published
2025-01-16
Title
Goodlayers Blocks < 1.0.3 - Reflected Cross-Site Scripting
Slug
goodlayers-core
Published
2024-12-02
Title
Goodlayers Core < 2.0.8 - Reflected Cross-Site Scripting via 'font-family'
Slug
goodlayers-core
Published
2024-12-12
Title
Goodlayers Core < 2.0.10 - Contributor+ Stored XSS
Slug
goodlayers-core
Published
2025-01-09
Title
GoodLayers Core < 2.1.3 - Subscriber+ Stored XSS via SVG Upload
Slug
goodlayers-core
Published
2025-09-23
Title
Goodlayers Core < 2.1.7 - Authenticated (Contributor+) Privilege Escalation
Slug
goodlms
Published
2020-11-12
Title
Good LMS < 2.1.5 - Unauthenticated SQL Injection
Slug
goods-catalog
Published
2023-09-04
Title
Goods Catalog <= 2.4.1 - Contributor+ Stored XSS
Slug
googl-url-shorter
Published
2025-01-16
Title
Goo.gl Url Shorter <= 1.0.1 - Reflected Cross-Site Scripting
Slug
google-1
Published
2025-04-24
Title
Peadig’s Google +1 Button <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-adsense-and-hotel-booking
Published
2015-08-15
Title
Google Adsense & Hotel Booking <= 1.0.5 - Open Proxy
Slug
google-adsense-for-responsive-design-gard
Published
2025-12-21
Title
Google AdSense for Responsive Design – GARD <= 2.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
google-analyticator
Published
2015-06-19
Title
Google Analyticator <= 6.4.9.3 - Cross-Site Request Forgery (CSRF)
Slug
google-analyticator
Published
2015-08-24
Title
Google Analyticator < 6.4.9.6 - Multiple Cross-Site Scripting (XSS)
Slug
google-analyticator
Published
2009-07-29
Title
Google Analyticator < 5.2.1 - XSS
Slug
google-analyticator
Published
2022-12-27
Title
Google Analyticator < 6.5.6 - Admin+ PHP Object Injection
Slug
google-analyticator
Published
2023-01-02
Title
Google Analyticator < 6.5.6 - Admin+ PHP Object Injection
Slug
google-analytics-dashboard
Published
2014-08-01
Title
Google Analytics Dashboard 2.0.4 - gad-admin-pages-posts.php pid Parameter SQL Injection
Slug
google-analytics-dashboard
Published
2017-03-01
Title
Google Analytics Dashboard - Authenticated Cross-Site Scripting (XSS)
Slug
google-analytics-dashboard-for-wp
Published
2023-01-13
Title
ExactMetrics < 7.12.1 - Contributor+ Stored XSS
Slug
google-analytics-dashboard-for-wp
Published
2023-05-09
Title
ExactMetrics < 7.14.2 - Contributor+ Stored XSS
Slug
google-analytics-dashboard-for-wp
Published
2025-01-24
Title
ExactMetrics < 8.2.0 - Missing Authorization
Slug
google-analytics-for-wordpress
Published
2014-11-26
Title
Google Analytics by Yoast <= 5.1.2 Cross-Site Scripting (XSS)
Slug
google-analytics-for-wordpress
Published
2015-03-06
Title
Google Analytics by Yoast <= 5.3.2 - Cross-Site Scripting (XSS)
Slug
google-analytics-for-wordpress
Published
2015-03-19
Title
Google Analytics by Yoast <= 5.3.2 - Stored Cross-Site Scripting (XSS)