WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
imithemes-listing
Published
2025-05-08
Title
IMITHEMES Listing < 3.4 - Unauthenticated Privilege Escalation via Unverified Password Reset
Slug
immocaster
Published
2025-07-28
Title
Immocaster WordPress <= 1.3.6 - Unauthenticated Local File Inclusion
Slug
immonex-kickstart
Published
2025-09-03
Title
immonex Kickstart < 1.11.13 - Authenticated (Contributor+) Local File Inclusion
Slug
immonex-kickstart
Published
2026-02-05
Title
immonex Kickstart < 1.13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
immonex-kickstart-team
Published
2025-09-22
Title
immonex Kickstart Team < 1.7.0 - Authenticated (Contributor+) Local File Inclusion
Slug
immotoolbox-connect
Published
2024-12-11
Title
ImmoToolBox Connect < 1.4.0 - Reflected Cross-Site Scripting
Slug
imoney
Published
2026-02-11
Title
iMoney <= 0.36 - Reflected Cross-Site Scripting
Slug
implied-cookie-consent
Published
2025-02-02
Title
Implied Cookie Consent <= 1.3 - Reflected Cross-Site Scripting
Slug
import-cdn-remote-images
Published
2025-07-16
Title
Import CDN-Remote Images < 2.1.3 - Cross-Site Request Forgery
Slug
import-csv-files
Published
2022-06-21
Title
Import CSV Files <= 1.0 - Reflected Cross-Site Scripting
Slug
import-eventbrite-events
Published
2024-12-13
Title
Import Eventbrite Events < 1.7.5 - Reflected Cross-Site Scripting
Slug
import-export-for-woocommerce
Published
2024-12-06
Title
Import Export For WooCommerce <= 1.6.2 - Subscriber+ Arbitrary File Upload
Slug
import-export-for-woocommerce
Published
2025-05-16
Title
Import Export For WooCommerce <= 1.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
import-export-for-woocommerce
Published
2025-11-03
Title
Import Export For WooCommerce <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
import-export-with-custom-rest-api
Published
2025-06-12
Title
REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation via process_handler Function
Slug
import-external-attachments
Published
2025-06-27
Title
Import external attachments <= 1.5.12 - Cross-Site Request Forgery
Slug
import-external-attachments
Published
2025-12-14
Title
Import external attachments <= 1.5.12 - Missing Authorization
Slug
import-external-images
Published
2023-03-16
Title
Import External Images <= 1.4 - CSRF
Slug
import-facebook-events
Published
2025-05-19
Title
Import Social Events < 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
import-from-yml
Published
2025-04-14
Title
Import from YML < 4.0.0 - Reflected Cross-Site Scripting
Slug
import-holded-products-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
import-holded-products-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
import-legacy-media
Published
2014-04-25
Title
Import Legacy Media <= 0.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
import-products-to-wc
Published
2025-06-25
Title
Amazon Products to WooCommerce <= 1.2.7 - Missing Authorization to Unauthenticated Arbitrary Product Creation
Slug
import-products-to-wc
Published
2025-07-01
Title
Amazon Products to WooCommerce <= 1.2.7 - Unauthenticated Server-Side Request Forgery