WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
homepage-pop-up
Published
2022-11-01
Title
Homepage Pop-up <= 1.2.5 - CSRF
Slug
homepage-pop-up
Published
2022-10-01
Title
Homepage Pop-up <= 1.2.5 - Admin+ Stored XSS
Slug
homepage-product-organizer-for-woocommerce
Published
2022-07-22
Title
Homepage Product Organizer for WooCommerce <= 1.1 - Subscriber+ SQLi
Slug
homerunner-smartcheckout
Published
2025-06-25
Title
Homerunner < 1.0.31 - Cross-Site Request Forgery to Settings Update
Slug
homey-core
Published
2025-12-10
Title
Homey Core < 2.4.4 - Missing Authorization
Slug
homey-login-register
Published
2025-01-13
Title
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation
Slug
homey-login-register
Published
2025-03-04
Title
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation in homey_register
Slug
honeypot
Published
2021-02-08
Title
WP Amour < 1.5.7 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
honeypot
Published
2024-03-15
Title
WP Armour < 2.1.14 - Reflected XSS
Slug
honeypot-for-wp-comment
Published
2024-02-08
Title
Honeypot for WP Comment <= 2.2.3 - Directory Traversal to Unauthenticated Arbitrary File Deletion
Slug
honeypot-for-wp-comment
Published
2024-02-09
Title
Honeypot for WP Comment <= 2.2.3 - Reflected Cross-Site Scripting via page
Slug
hoo-addons-for-elementor
Published
2024-10-31
Title
Hoo Addons for Elementor <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hooked-editable-content
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
hooked-editable-content
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
horizontal-line-shortcode
Published
2025-01-16
Title
Horizontal Line Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
horizontal-scroll-image-slideshow
Published
2024-12-11
Title
Horizontal scroll image slideshow <= 10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
horizontal-scrolling-announcement
Published
2023-09-15
Title
Horizontal scrolling announcement for WordPress <= 9.2 Contributor+ Stored XSS
Slug
horizontal-scrolling-announcement
Published
2023-09-15
Title
Horizontal scrolling announcement <= 9.2 - Authenticated (subscriber+) Blind SQL Injection
Slug
horizontal-scrolling-announcements
Published
2024-08-05
Title
Horizontal scrolling announcements < 2.5 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
horizontal-slider
Published
2025-09-22
Title
HORIZONTAL SLIDER <= 2.4 - Cross-Site Request Forgery
Slug
horoscope-and-tarot
Published
2025-01-06
Title
Horoscope And Tarot < 1.3.1 - Contributor+ Stored XSS
Slug
hospital-management
Published
2025-04-22
Title
Hospital Management System <= 47.0(20-11-2023) - Unauthenticated SQL Injection
Slug
hospital-management
Published
2025-04-21
Title
Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) SQL Injection
Slug
hospital-management
Published
2025-04-22
Title
Hospital Management System <= 47.0(20-11-2023) - Unauthenticated Arbitrary File Upload
Slug
hospital-management
Published
2025-04-22
Title
Hospital Management System <= 47.0(20-11-2023) - Reflected Cross-Site Scripting