WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
image-optimizer-wd
Published
2023-05-02
Title
Image Optimizer by 10web < 1.0.27 - Admin+ Path Traversal
Slug
image-optimizer-wpssk
Published
2025-12-04
Title
Image Optimizer by wps.sk <= 1.2.0 - Cross-Site Request Forgery to Bulk Image Optimization
Slug
image-over-image-vc-extension
Published
2023-03-08
Title
Image Over Image For WPBakery Page Builder < 3.0 - Contributor+ Stored XSS
Slug
image-protector
Published
2023-06-19
Title
Image Protector <= 1.1 - Admin+ Stored Cross-Site Scripting
Slug
image-regenerate-select-crop
Published
2023-10-09
Title
Image Regenerate & Select Crop < 7.3.1 - Sensitive Information Exposure
Slug
image-resizer-on-the-fly
Published
2025-06-13
Title
Image Resizer On The Fly <= 1.1 - Unauthenticated Arbitrary File Deletion
Slug
image-shadow
Published
2025-06-23
Title
Image Shadow <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
image-sizes
Published
2026-07-01
Title
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More < 6.3.3 - Missing Authorization
Slug
image-sizes
Published
2026-06-29
Title
ThumbPress < 6.2.2 - Subscriber+ Plugin Deactivation
Slug
image-sizes-controller
Published
2025-06-19
Title
Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes <= 1.0.10 - Missing Authorization
Slug
image-sizes-on-demand
Published
2026-06-23
Title
Image Sizes on Demand <= 1.3 - Reflected Cross-Site Scripting via PHP_SELF Server Variable
Slug
image-slider-slideshow
Published
2026-01-07
Title
Image Slider Slideshow <= 1.8 - Authenticated (Contributor+) Insecure Direct Object Reference
Slug
image-slider-widget
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
image-slider-widget
Published
2016-12-23
Title
Slider <= 1.1.89 - Authenticated Arbitrary File Deletion
Slug
image-slider-widget
Published
2022-06-30
Title
Image Slider < 1.1.123 - Arbitrary Post Duplication via CSRF
Slug
image-slider-widget
Published
2024-04-22
Title
Image Slider < 1.1.127 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
image-slider-with-description
Published
2014-08-01
Title
Image slider with description - Unspecified
Slug
image-slider-with-description
Published
2025-06-27
Title
Image Slider With Description <= 9.2 - Cross-Site Request Forgery
Slug
image-source-control-isc
Published
2021-10-04
Title
Image Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value Change
Slug
image-source-control-isc
Published
2023-12-29
Title
Image Source Control < 2.17.1 - Sensitive Information Exposure via Log File
Slug
image-source-control-isc
Published
2025-01-17
Title
Image Source Control Lite – Show Image Credits and Captions < 2.28.1 - Reflected Cross-Site Scripting
Slug
image-source-control-isc
Published
2025-01-15
Title
Image Source Control < 2.29.1 - Reflected Cross-Site Scripting
Slug
image-source-control-isc
Published
2026-04-20
Title
Image Source Control Lite – Show Image Credits and Captions < 3.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'Image Source' Field
Slug
image-switcher
Published
2025-01-16
Title
Image Switcher <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-switcher
Published
2025-01-16
Title
Image Switcher <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting