WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
google-news-sitemap
Published
2022-05-04
Title
Andrea Pernici News Sitemap for Google <= 1.0.16 - Contributor+ Stored Cross-Site Scripting
Slug
google-one
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
google-org-chart
Published
2025-01-16
Title
Google Org Chart <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-pagerank-display
Published
2026-04-21
Title
Google PageRank Display <= 1.4 - Cross-Site Request Forgery to Settings Update via Settings Page
Slug
google-pagespeed-insights
Published
2022-03-08
Title
Google Pagespeed Insights < 4.0.4 - Reflected Cross-Site Scripting
Slug
google-pagespeed-insights
Published
2022-06-27
Title
Insights from Google PageSpeed < 4.0.7 - Multiple CSRF
Slug
google-picasa-albums-viewer
Published
2023-12-26
Title
Google Photos Gallery with Shortcodes < 4.0.3 - Reflected Cross-Site Scripting
Slug
google-places-reviews
Published
2022-05-17
Title
Google Places Review < 2.0.0 - Admin+ Stored Cross Site Scripting
Slug
google-plus-comments
Published
2025-09-26
Title
Google+ Comments <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
google-plus-google
Published
2025-03-20
Title
Google Plus <= 1.0.2 - Reflected Cross-Site Scripting
Slug
google-plus-name-link-popup-badge
Published
2026-05-26
Title
Google+ Link Name <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
google-plus-one-bottom
Published
2026-06-01
Title
Google Plus One Bottom <= 0.0.2 - Cross-Site Request Forgery to Plugin Settings Update via Settings Page
Slug
google-plus-share-and-plusone-button
Published
2024-11-22
Title
Google Plus Share and +1 Button <= 1.0 - Cross-Site Request Forgery
Slug
google-seo-author-snippets
Published
2016-04-21
Title
Google SEO Pressor Snippet <= 1.2.6 - Reflected Cross-Site Scripting (XSS)
Slug
google-seo-author-snippets
Published
2025-03-31
Title
Google SEO Pressor Snippet <= 2.0 - Missing Authorization
Slug
google-seo-author-snippets
Published
2025-04-01
Title
Google SEO Pressor Snippet <= 2.0 - Cross-Site Request Forgery
Slug
google-shortlink
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
google-site-kit
Published
2020-05-13
Title
Site Kit by Google < 1.8.0 - Privilege Escalation to gain Search Console Access
Slug
google-site-kit
Published
2026-06-03
Title
Site Kit by Google < 1.176.0 - Editor+ Email Reporting Settings Update
Slug
google-sitemap-generator
Published
2017-03-01
Title
Google XML Sitemaps <= 4.0.8 - Authenticated Reflected XSS (via HOST header)
Slug
google-sitemap-generator
Published
2018-12-18
Title
Google XML Sitemaps < 4.1.0 - Authenticated Cross-Site Scripting (XSS)
Slug
google-sitemap-generator
Published
2022-05-30
Title
Google XML Sitemaps < 4.1.3 - Admin+ Stored Cross-Site Scripting
Slug
google-sitemap-generator
Published
2025-10-31
Title
Google XML Sitemaps < 4.1.23 - Missing Authorization
Slug
google-sitemap-plugin
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
google-transliteration
Published
2025-01-16
Title
Google Transliteration <= 1.7.2 - Reflected Cross-Site Scripting