WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
header-images-rotator
Published
2025-01-16
Title
ntp-header-images <= 1.2 - Reflected Cross-Site Scripting
Slug
headinger-elementor
Published
2025-12-31
Title
Headinger for Elementor <= 1.1.4 - Missing Authorization
Slug
headline-analyzer
Published
2023-10-18
Title
Headline Analyzer < 1.3.2 - Missing Authorization via REST APIs
Slug
headline-analyzer
Published
2024-04-22
Title
Headline Analyzer < 1.3.4 - Cross-Site Request Forgery
Slug
headline-analyzer
Published
2025-10-19
Title
Headline Analyzer <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
health-check
Published
2019-01-25
Title
Health Check & Troubleshooting <= 1.2.3 - Authenticated Path Traversal
Slug
health-check
Published
2019-01-25
Title
Health Check & Troubleshooting <= 1.2.3 - Authenticated Lack of Authorisation
Slug
health-check
Published
2023-03-31
Title
Health Check & Troubleshooting < 1.6.0 - CSRF
Slug
health-check
Published
2022-12-05
Title
Health Check & Troubleshooting < 1.2.4 - Missing Authorization Checks
Slug
health-check
Published
2025-12-15
Title
Health Check & Troubleshooting <= 1.7.1 - Authenticated (Admin+) Path Traversal
Slug
heart-this
Published
2024-03-29
Title
HeartThis <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
heartland-management-terminal
Published
2025-01-16
Title
Heartland Management Terminal < 1.4.0 0 - Reflected Cross-Site Scripting
Slug
heat-trackr
Published
2016-10-21
Title
Heat Trackr <= 1.0 - XSS
Slug
heateor-login
Published
2025-09-09
Title
Heateor Login – Social Login Plugin < 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
heateor-social-comments
Published
2023-01-20
Title
Heateor Social Comments < 1.6.2 - Contributor+ Stored XSS
Slug
heateor-social-login
Published
2024-01-31
Title
Heateor Social Login < 1.1.31 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
heateor-social-login
Published
2024-05-08
Title
Heateor Social Login WordPress < 1.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
heateor-social-login
Published
2024-06-06
Title
Heateor Social Login WordPress < 1.1.33 - Unauthenticated Stored Cross-Site Scripting
Slug
heateor-social-login
Published
2024-06-06
Title
Heateor Social Login WordPress < 1.1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
heateor-social-login
Published
2024-11-05
Title
Heateor Social Login WordPress < 1.1.36 - Authentication Bypass
Slug
heateor-social-login
Published
2025-12-26
Title
Heateor Social Login <= 1.1.39 - Cross-Site Request Forgery
Slug
hebrewdates
Published
2024-11-11
Title
Hebrew Date < 2.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
hello-event-widgets-for-elementor
Published
2024-12-11
Title
Hello Event Widgets For Elementor < 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hello-in-all-languages
Published
2024-12-12
Title
Hello in All Languages <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
hello-world
Published
2024-09-30
Title
Hello World < 2.2.0 - Authenticated (Subscriber+) Arbitrary File Read