WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
horizontal-scrolling-announcement
Published
2023-09-15
Title
Horizontal scrolling announcement for WordPress <= 9.2 Contributor+ Stored XSS
Slug
horizontal-scrolling-announcement
Published
2023-09-15
Title
Horizontal scrolling announcement <= 9.2 - Authenticated (subscriber+) Blind SQL Injection
Slug
horizontal-scrolling-announcements
Published
2024-08-05
Title
Horizontal scrolling announcements < 2.5 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
horizontal-slider
Published
2025-09-22
Title
HORIZONTAL SLIDER <= 2.4 - Cross-Site Request Forgery
Slug
horoscope-and-tarot
Published
2025-01-06
Title
Horoscope And Tarot < 1.3.1 - Contributor+ Stored XSS
Slug
hospital-doctor-directory
Published
2026-01-22
Title
Hospital Doctor Directory <= 1.3.9 - Missing Authorization
Slug
hospital-doctor-directory
Published
2026-01-22
Title
Hospital Doctor Directory <= 1.3.9 - Missing Authorization
Slug
hospital-doctor-directory
Published
2026-01-22
Title
Hospital Doctor Directory <= 1.3.9 - Subscriber+ Privilege Escalation
Slug
hospital-management
Published
2025-04-22
Title
Hospital Management System <= 47.0(20-11-2023) - Unauthenticated SQL Injection
Slug
hospital-management
Published
2025-04-21
Title
Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) SQL Injection
Slug
hospital-management
Published
2025-04-22
Title
Hospital Management System <= 47.0(20-11-2023) - Unauthenticated Arbitrary File Upload
Slug
hospital-management
Published
2025-04-22
Title
Hospital Management System <= 47.0(20-11-2023) - Reflected Cross-Site Scripting
Slug
hospital-management
Published
2025-05-22
Title
Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Privilege Escalation
Slug
hospital-management
Published
2025-05-20
Title
Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Arbitrary File Upload
Slug
host-analyticsjs-local
Published
2021-12-01
Title
CAOS < 4.1.9 - Admin+ Arbitrary Folder Deletion via Path Traversal
Slug
host-analyticsjs-local
Published
2023-12-12
Title
CAOS < 4.7.15 - Unauthenticated Settings Update
Slug
host-php-info
Published
2025-01-06
Title
Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure
Slug
host-webfonts-local
Published
2021-08-23
Title
OMGF < 4.5.4 - Subscriber+ Arbitrary File/Folder Deletion
Slug
host-webfonts-local
Published
2021-08-23
Title
OMGF < 4.5.4 - Unauthenticated Path Traversal in REST API
Slug
host-webfonts-local
Published
2021-12-01
Title
OMGF < 4.5.12 - Admin+ Arbitrary Folder Deletion via Path Traversal
Slug
host-webfonts-local
Published
2024-01-02
Title
OMGF < 5.7.10 - Unauthenticated Directory Deletion & Stored XSS
Slug
hostel
Published
2019-05-25
Title
Hostel Plugin <= 1.1.3 - Unauthenticated Stored XSS
Slug
hostel
Published
2023-05-10
Title
Hostel < 1.1.5.2 - Admin+ Stored XSS
Slug
hostel
Published
2024-05-06
Title
hostel < 1.1.5.4 - Cross-Site Request Forgery
Slug
hostel
Published
2024-06-22
Title
Hostel < 1.1.5.3 - Reflected XSS