WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
hydra-booking
Published
2025-07-28
Title
Hydra Booking 1.1.0 - 1.1.18 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via tfhb_reset_password_callback Function
Slug
hydra-booking
Published
2025-11-10
Title
Hydra Booking < 1.1.28 - Unauthenticated Payment Bypass
Slug
hydra-booking
Published
2025-11-10
Title
Hydra Booking < 1.1.28 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation
Slug
hydra-booking
Published
2025-06-12
Title
Hydra Booking < 1.1.11 - Authenticated (Subscriber+) SQL Injection
Slug
hydra-booking
Published
2025-06-12
Title
Hydra Booking < 1.1.10 - Missing Authorization
Slug
hydra-booking
Published
2025-11-27
Title
Hydra Booking < 1.1.33 - Authenticated (Custom role+) SQL Injection
Slug
hydra-booking
Published
2026-01-21
Title
Hydra Booking < 1.1.33 - Unauthenticated Privilege Escalation
Slug
hyp3rl0cal-city-search
Published
2025-01-16
Title
CtyGrid Hyp3rL0cal Search WordPress Plugin <= 0.1.1.1 - Reflected Cross-Site Scripting
Slug
hypercomments
Published
2020-10-07
Title
HyperComments <= 1.2.2 - Unauthenticated Arbitrary File Deletion
Slug
hypercomments
Published
2025-06-04
Title
HyperComments <= 1.2.2 - Unauthenticated (Subscriber+) Arbitrary Options Update
Slug
hyperlink-group-block
Published
2024-10-15
Title
Hyperlink Group Block < 1.17.6 - Contributor+ Stored XSS
Slug
hyperlink-group-block
Published
2025-04-01
Title
Hyperlink Group Block < 2.0.2 - Contributor+ Stored XSS
Slug
hypotext
Published
2025-04-01
Title
Hypotext <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hyve-lite
Published
2025-01-24
Title
AI Chatbot for WordPress – Hyve Lite < 1.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting