WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
h5p
Published
2024-06-06
Title
H5P < 1.15.8 - Contributor+ Stored XSS
Slug
h5p
Published
2025-10-13
Title
Interactive Content – H5P < 1.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
h5p
Published
2025-12-28
Title
H5P < 1.16.2 - Missing Authorization
Slug
h5p-css-editor
Published
2021-12-14
Title
H5P CSS Editor <= 1.0 - Reflected Cross-Site Scripting
Slug
h5pxapikatchu
Published
2025-03-27
Title
SNORDIAN's H5PxAPIkatchu < 0.4.15 - Missing Authorization
Slug
h5pxapikatchu
Published
2025-11-13
Title
SNORDIAN's H5PxAPIkatchu < 0.4.18 - Unauthenticated Stored Cross-Site Scripting via insert_data
Slug
hack-info
Published
2024-12-11
Title
Hack-Info < 3.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
hack-me-if-you-can
Published
2025-01-16
Title
Hack me if you can <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
hacklog-downloadmanager
Published
2024-11-13
Title
Hacklog DownloadManager <= 2.1.4 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
hacklog-remote-attachment
Published
2025-04-24
Title
Hacklog Remote Attachment <= 1.3.2 - Cross-Site Request Forgery
Slug
hacklog-remote-image-autosave
Published
2025-03-24
Title
Hacklog Remote Image Autosave <= 2.1.0 - Cross-Site Request Forgery
Slug
hackrepair-plugin-archiver
Published
2025-09-12
Title
The Hack Repair Guy's Plugin Archiver < 3.1.1 - Authenticated (Administrator+) Arbitrary File Deletion
Slug
hackrepair-plugin-archiver
Published
2025-09-16
Title
The Hack Repair Guy's Plugin Archiver < 3.1.1 - Cross-Site Request Forgery to Arbitrary Directory Deletion in /wp-content
Slug
haiku-minimalist-audio-player
Published
2014-08-01
Title
haiku-minimalist-audio-player <= 1.1.0 - jPlayer.swf XSS
Slug
hal
Published
2021-10-14
Title
HAL < 2.2 - Admin+ Stored Cross-Site Scripting
Slug
halfdata-optin-downloads
Published
2024-12-11
Title
Opt-In Downloads <= 4.07 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
hamburger-icon-menu-lite
Published
2025-04-10
Title
Hamburger Icon Menu Lite <= 1.0 - Reflected Cross-Site Scripting
Slug
hana-flv-player
Published
2021-05-05
Title
Hana Flv Player <= 3.1.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
handl-utm-grabber
Published
2019-08-27
Title
HandL UTM Grabber < 2.6.5 - Authenticated Option Change via CSRF
Slug
handl-utm-grabber
Published
2025-11-19
Title
HandL UTM Grabber / Tracker < 2.8.1 - Reflected XSS via utm_source
Slug
handl-utm-grabber
Published
2025-11-19
Title
HandL UTM Grabber / Tracker < 2.8.1 - Reflected XSS via handl_landing_page
Slug
handsome-testimonials
Published
2021-06-29
Title
Handsome Testimonials & Reviews < 2.1.1 - Authenticated (Subscriber+) SQL Injection
Slug
handtalk
Published
2025-06-19
Title
Hand Talk < 6.2 - Admin+ Stored XSS
Slug
happiness-reports-for-help-scout
Published
2024-11-04
Title
Satisfaction Reports from Help Scout <= 2.0.3 - Reflected Cross-Site Scripting
Slug
happy-elementor-addons
Published
2021-04-26
Title
Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS