WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
http-https-remover
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
https-links-in-content
Published
2025-01-16
Title
HTTP to HTTPS link changer by Eyga.net <= 0.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
https://github.com/placetopay/woocommerce-gateway-placetopay
Published
2026-07-16
Title
WooCommerce Placetopay Gateway <= 3.2.2 - Reflected Cross-Site Scripting via 'redirect-url'
Slug
hub-core
Published
2025-11-09
Title
Hub Core <= 5.0.8 - Authenticated (Contributor+) Local File Inclusion
Slug
hub2word
Published
2022-02-16
Title
hub2word <= 1.1.0 - Subscriber+ Arbitrary Options Update
Slug
hueman-addons
Published
2023-01-26
Title
Hueman Addons <= 2.3.3 - Contributor+ Stored XSS via Shortcode
Slug
huger-elementor
Published
2025-12-11
Title
Huger for Elementor <= 1.1.5 - Missing Authorization
Slug
hummingbird-performance
Published
2022-03-23
Title
Hummingbird < 3.3.2 - Admin+ Stored Cross-Site Scripting
Slug
hummingbird-performance
Published
2023-03-20
Title
Hummingbird < 3.4.2 - Unauthenticated Path Traversal
Slug
hummingbird-performance
Published
2024-04-22
Title
Hummingbird < 3.7.4 - Missing Authorization
Slug
hummingbird-performance
Published
2024-08-07
Title
Hummingbird < 3.9.2 - Cross-Site Request Forgery
Slug
hummingbird-performance
Published
2024-08-07
Title
Hummingbird < 3.9.2 - Missing Authorization
Slug
hummingbird-performance
Published
2025-12-17
Title
Hummingbird < 3.18.1 - Unauthenticated Sensitive Information Exposure via Log File
Slug
hungarian-pickup-points-for-woocommerce
Published
2022-09-14
Title
Multiple Plugins from Viszt Peter - Multiple CSRF
Slug
hungred-post-thumbnail
Published
2014-08-01
Title
Hungred Post Thumbnail - hpt_file_upload.php File Upload PHP Code Execution
Slug
hunk-companion
Published
2024-10-10
Title
Hunk Companion < 1.8.5 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
Slug
hunk-companion
Published
2024-12-10
Title
Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation
Slug
hurrakify
Published
2024-12-11
Title
Hurrakify < 8.0.1 - Unauthenticated Server-Side Request Forgery
Slug
hurrytimer
Published
2024-04-16
Title
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce < 2.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hurrytimer
Published
2024-10-23
Title
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce < 2.11.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Publication
Slug
hurrytimer
Published
2025-02-13
Title
HurryTimer < 2.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name
Slug
hurrytimer
Published
2025-06-27
Title
HurryTimer < 2.14.0 - Missing Authorization
Slug
hurrytimer
Published
2026-01-11
Title
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce < 2.14.3 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
huskerportfolio
Published
2014-08-01
Title
HuskerPortfolio 0.3 - huskerPortfolio.php File Upload CSRF
Slug
huurkalender-wp
Published
2025-01-07
Title
Huurkalender WP < 1.6.0 - Contributor+ Stored XSS