WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
import-xml-feed
Published
2023-08-28
Title
Import XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File Upload
Slug
import-xml-feed
Published
2024-04-05
Title
Import XML and RSS Feeds < 2.1.6 - Authenticated (Administrator+) Arbitrary File Upload
Slug
import-youtube-videos-as-wp-post
Published
2025-06-19
Title
Import YouTube videos as WP Posts <= 2.1 - Missing Authorization
Slug
importify
Published
2023-12-01
Title
Importify < 1.0.5 - Unauthenticated Sensitive Information Exposure
Slug
impreza
Published
2023-12-26
Title
Impreza < 8.18 - Reflected Cross-Site Scripting
Slug
improve-my-city
Published
2025-03-18
Title
Improve My City <= 1.6 - Unauthenticated Stored Cross-Site Scripting
Slug
improved-include-page
Published
2021-11-15
Title
Improved Include Page <= 1.2 - Contributor+ Arbitrary Posts/Pages Access
Slug
improved-sale-badges
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
improved-sale-badges-free-version
Published
2025-01-16
Title
Improved Sale Badges – Free Version <= 1.0.1 - Authenticated (Subscriber+) Local File Inclusion
Slug
improved-user-search-in-backend
Published
2014-09-19
Title
Improved User Search in Backend < 1.2.6 - CSRF & XSS
Slug
improved-variable-product-attributes
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
ims-countdown
Published
2024-12-13
Title
IMS Countdown < 1.3.6 - Contributor+ Stored XSS
Slug
imwptip
Published
2026-01-27
Title
imwptip <= 1.1 - Cross-Site Request Forgery to Settings Update
Slug
in-stock-mailer-for-woocommerce
Published
2025-03-11
Title
In Stock Mailer for WooCommerce <= 2.1.1 - Reflected Cross-Site Scripting
Slug
inactive-logout
Published
2023-09-20
Title
Inactive Logout < 3.2.3 - Missing Authorization
Slug
inactive-logout
Published
2023-09-20
Title
Inactive Logout < 3.2.3 - Cross-Site Request Forgery
Slug
inactive-logout
Published
2025-10-31
Title
Inactive Logout < 3.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
inactive-user-deleter
Published
2023-07-17
Title
Inactive User Deleter < 1.60 - Cross-Site Request Forgery
Slug
inavii-social-feed-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
inazo-advanced-ads-management
Published
2016-09-06
Title
Advanced ads Management <= 1.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
inbound-brew
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
inbound-brew
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
inbound-brew
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
inboundio-marketing
Published
2015-03-24
Title
InBoundio Marketing Plugin <= 2.0.3 - Shell Upload
Slug
inboxify-sign-up-form
Published
2025-12-26
Title
Inboxify Sign Up Form <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting