WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
hd-quiz
Published
2024-01-16
Title
HD Quiz < 1.8.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Slug
hd-webplayer
Published
2012-08-28
Title
Plugin HD Webplayer <= 1.1 - SQL Injections
Slug
hdw-player-video-player-video-gallery
Published
2014-09-19
Title
HDW Player 2.4.2 - wp-admin/admin.php videos Page id Parameter SQL Injection
Slug
hdw-player-video-player-video-gallery
Published
2023-11-29
Title
HDW Player Plugin (Video Player & Video Gallery) <= 5.0 - Cross-Site Scripting
Slug
hdw-tube
Published
2016-04-12
Title
HDW WordPress Video Gallery <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
header-enhancement
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
header-footer-code-manager
Published
2021-10-11
Title
Header Footer Code Manager < 1.1.14 - Admin+ SQL Injections
Slug
header-footer-code-manager
Published
2022-02-22
Title
Header Footer Code Manager < 1.1.17 - Reflected Cross-Site Scripting
Slug
header-footer-code-manager
Published
2022-07-04
Title
Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting
Slug
header-footer-code-manager
Published
2023-07-04
Title
Header Footer Code Manager < 1.1.35 - Snippets Activation/Deactivation/Deletion via CSRF
Slug
header-footer-elementor
Published
2021-04-13
Title
Elementor - Header, Footer & Blocks Template < 1.5.8 - Contributor+ Stored XSS
Slug
header-footer-elementor
Published
2024-03-11
Title
Elementor Header & Footer Builder < 1.6.25 - Contributor+ Stored Cross-Site Scripting
Slug
header-footer-elementor
Published
2024-05-15
Title
Elementor Header & Footer Builder < 1.6.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
header-footer-elementor
Published
2024-05-16
Title
Elementor Header & Footer Builder < 1.6.27 - Authenticated (Author+) HTML Injection
Slug
header-footer-elementor
Published
2024-05-23
Title
Elementor Header & Footer Builder < 1.6.26.1 - Contributor+ Stored XSS
Slug
header-image-slider
Published
2024-03-29
Title
Header Image Slider <= 0.3 - Reflected Cross-Site Scripting
Slug
headline-analyzer
Published
2023-10-18
Title
Headline Analyzer < 1.3.2 - Missing Authorization via REST APIs
Slug
headline-analyzer
Published
2024-04-22
Title
Headline Analyzer < 1.3.4 - Cross-Site Request Forgery
Slug
health-check
Published
2019-01-25
Title
Health Check & Troubleshooting <= 1.2.3 - Authenticated Path Traversal
Slug
health-check
Published
2019-01-25
Title
Health Check & Troubleshooting <= 1.2.3 - Authenticated Lack of Authorisation
Slug
health-check
Published
2022-12-05
Title
Health Check & Troubleshooting < 1.2.4 - Missing Authorization Checks
Slug
health-check
Published
2023-03-31
Title
Health Check & Troubleshooting < 1.6.0 - CSRF
Slug
heart-this
Published
2024-03-29
Title
HeartThis <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
heat-trackr
Published
2016-10-21
Title
Heat Trackr <= 1.0 - XSS
Slug
heateor-social-comments
Published
2023-01-20
Title
Heateor Social Comments < 1.6.2 - Contributor+ Stored XSS