WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
image-source-control-isc
Published
2021-10-04
Title
Image Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value Change
Slug
image-source-control-isc
Published
2023-12-29
Title
Image Source Control < 2.17.1 - Sensitive Information Exposure via Log File
Slug
image-source-control-isc
Published
2025-01-17
Title
Image Source Control Lite – Show Image Credits and Captions < 2.28.1 - Reflected Cross-Site Scripting
Slug
image-source-control-isc
Published
2025-01-15
Title
Image Source Control < 2.29.1 - Reflected Cross-Site Scripting
Slug
image-source-control-isc
Published
2026-04-20
Title
Image Source Control Lite – Show Image Credits and Captions < 3.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'Image Source' Field
Slug
image-switcher
Published
2025-01-16
Title
Image Switcher <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-switcher
Published
2025-01-16
Title
Image Switcher <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-tag-manager
Published
2024-01-16
Title
Image Tag Manager <= 1.5 - Reflected Cross-Site Scripting via default_class
Slug
image-upload-for-bbpress
Published
2023-12-27
Title
Inline Image Upload for BBPress < 1.1.19 - Cross-Site Request Forgery via hm_bbpui_admin_page
Slug
image-upload-for-bbpress
Published
2025-03-28
Title
Inline Image Upload for BBPress < 1.1.20 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
image-uploader-for-welcart
Published
2026-08-14
Title
Image Uploader for Welcart <= 1.4.6 - Authenticated (Author+) SQL Injection via Attachment 'post_title' Parameter
Slug
image-vertical-reel-scroll-slideshow
Published
2023-10-18
Title
Image vertical reel scroll slideshow <= 9.2 - Admin+ Stored XSS
Slug
image-vertical-reel-scroll-slideshow
Published
2023-10-30
Title
Image vertical reel scroll slideshow < 9.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
image-viewer
Published
2026-02-04
Title
All In One Image Viewer Block < 1.0.3 - Unauthenticated Server-Side Request Forgery via image-proxy Endpoint
Slug
image-wall
Published
2025-03-27
Title
Image Wall < 3.1 - Reflected Cross-Site Scripting
Slug
image-wall
Published
2025-07-16
Title
Image Wall < 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-watermark
Published
2024-04-05
Title
Image Watermark < 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification
Slug
image-widget
Published
2024-11-22
Title
Image Widget < 4.4.11 - Admin+ Stored XSS
Slug
image-widget
Published
2026-03-17
Title
Image Widget < 4.4.12 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
imageboss
Published
2020-05-11
Title
ImageBoss < 3.0.6 - Admin+ Stored Cross-Site Scripting
Slug
imagelinks-interactive-image-builder-lite
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
imagelinks-interactive-image-builder-lite
Published
2022-12-16
Title
ImageLinks Interactive Image Builder for WordPress < 1.5.4 - Contributor+ Stored XSS
Slug
imagelinks-interactive-image-builder-lite
Published
2023-10-29
Title
ImageLinks Interactive Image Builder < 1.6.0 - Admin+ SQLi
Slug
imagelinks-pro
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
imagemagick-engine
Published
2022-10-18
Title
ImageMagick-Engine < 1.7.6 - Command Injection via CSRF