WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
hide-login
Published
2025-01-03
Title
Hide Login+ <= 3.5.1 - Reflected Cross-Site Scripting
Slug
hide-my-site
Published
2024-08-20
Title
Hide My Site <= 2.2 - Unauthenticated Information Exposure
Slug
hide-my-wp
Published
2018-09-15
Title
Hide My WP <= 2.0.02 - SQL Injection & Script Injection
Slug
hide-my-wp
Published
2023-05-08
Title
Hide My WP Ghost – Security < 5.0.20 - IP Address Spoofing
Slug
hide-my-wp
Published
2024-07-02
Title
Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure
Slug
hide-my-wp
Published
2024-11-14
Title
Hide My WP Ghost – Security & Firewall < 5.3.02 - Reflected Cross-Site Scripting via URL
Slug
hide-my-wp
Published
2025-02-11
Title
Hide My WP Ghost < 5.4.01 - Hidden Login Page Disclosure
Slug
hide-my-wp
Published
2025-03-13
Title
WP Ghost < 5.4.02 - Unauthenticated Limited File Read
Slug
hide-my-wp
Published
2025-03-19
Title
Hide My WP Ghost < 5.4.02 - Unauthenticated Local File Inclusion
Slug
hide-plugins
Published
2025-12-31
Title
Hide Plugins <= 1.0.4 - Missing Authorization
Slug
hide-real-download-path
Published
2025-09-05
Title
Hide Real Download Path <= 1.6 - Cross-Site Request Forgery
Slug
hide-shipping-method-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
hide-shipping-method-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
hide-shipping-method-for-woocommerce
Published
2025-01-31
Title
Hide Shipping Method For WooCommerce < 1.5.2 - Missing Authorization
Slug
hide-text-shortcode
Published
2025-08-13
Title
Hide Text Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hide-wp-toolbar
Published
2025-09-22
Title
Hide WP Toolbar <= 2.7 - Missing Authorization
Slug
hide_my_wp
Published
2015-07-27
Title
Hide My WP < 4.52 - Stored Cross-Site Scripting (XSS)
Slug
hide_my_wp
Published
2015-08-13
Title
Hide My WP <= 4.53 - Stored-Cross Site Scripting (XSS)
Slug
hide_my_wp
Published
2021-11-24
Title
Hide My WP < 6.2.4 - Unauthenticated Plugin Deactivation
Slug
hide_my_wp
Published
2021-11-24
Title
Hide My WP < 6.2.4 - Unauthenticated SQL Injection
Slug
hide_my_wp
Published
2021-11-24
Title
Hide My WP < 6.2.4 - Unauthenticated SQLi
Slug
hide_my_wp
Published
2021-11-24
Title
Hide My WP < 6.2.4 - Unauthenticated Reset Token Disclosure
Slug
hide_my_wp
Published
2023-01-11
Title
Hide My WP < 6.2.9 - Unauthenticated SQLi
Slug
hidepost
Published
2025-06-27
Title
HidePost <= 2.3.8 - Cross-Site Request Forgery
Slug
hidepost
Published
2025-09-26
Title
HidePost <= 2.3.8 - Cross-Site Request Forgery