WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Missing Authorization to Settings Update in optimizeAllOn
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Cross-Site Request Forgery to Settings Update in optimizeAllOn
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Missing Authorization to Settings Update in stopOptimizeAll
Slug
imagerecycle-pdf-image-compression
Published
2024-08-23
Title
ImageRecycle pdf & image compression < 3.1.15 - Cross-Site Request in Several AJAX Actions
Slug
imagerecycle-pdf-image-compression
Published
2024-08-23
Title
ImageRecycle pdf & image compression < 3.1.15 - Missing Authorization in Several AJAX Actions
Slug
imagerecycle-pdf-image-compression
Published
2024-12-10
Title
ImageRecycle pdf & image compression < 3.1.17 - Reflected Cross-Site Scripting
Slug
images-asynchronous-load
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
images-lazyload-and-slideshow
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
images-optimize-and-upload-cf7
Published
2022-12-21
Title
Images Optimize and Upload CF7 < 2.2.1 - Unauthenticated Arbitrary File Deletion
Slug
images-optimizer
Published
2025-02-02
Title
Plugin A/B Image Optimizer <= 3.3 - Authenticated (Subscriber+) Arbitrary File Download
Slug
images-to-webp
Published
2021-10-19
Title
Images to WebP < 1.9 - Authenticated Local File Inclusion
Slug
images-to-webp
Published
2021-10-19
Title
Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)
Slug
imageseo
Published
2022-12-28
Title
Optimize images ALT Text (alt tag) & names for SEO using AI < 2.0.8 - Settings Update via CSRF
Slug
imageseo
Published
2024-07-23
Title
Optimize Images ALT Text (alt tag) & names for SEO using AI < 3.1.2 - Unauthenticated Full Path Disclosure
Slug
imaq-core
Published
2025-12-11
Title
IMAQ Core <= 1.2.1 - Cross-Site Request Forgery to URL Structure Update
Slug
imbachat-widget
Published
2024-11-20
Title
ImbaChat <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
imdb-info-box
Published
2022-05-09
Title
IMDB info box <= 2.0 - Admin+ Stored Cross-Site Scripting
Slug
imdb-widget
Published
2016-03-30
Title
IMDb Profile Widget <= 1.0.8 - Local File Inclusion (LFI)
Slug
imember360
Published
2014-04-24
Title
iMember360 < 3.9.001 - Multiple Issues
Slug
imgspider
Published
2024-07-03
Title
IMGspider < 2.3.11 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file'
Slug
imgspider
Published
2024-07-03
Title
IMGspider < 2.3.11 - Authenticated (Contributor+) Arbitrary File Upload via 'upload'
Slug
imgspider
Published
2026-01-06
Title
IMGspider <= 2.3.12 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
imithemes-listing
Published
2025-05-08
Title
IMITHEMES Listing < 3.4 - Unauthenticated Privilege Escalation via Unverified Password Reset
Slug
immocaster
Published
2025-07-28
Title
Immocaster WordPress <= 1.3.6 - Unauthenticated Local File Inclusion
Slug
immonex-kickstart
Published
2025-09-03
Title
immonex Kickstart < 1.11.13 - Authenticated (Contributor+) Local File Inclusion