WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
include-me
Published
2025-09-09
Title
Include Me < 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
include-url
Published
2025-03-24
Title
Include URL <= 0.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
include-url
Published
2025-03-29
Title
Include URL <= 0.3.5 - Authenticated (Contributor+) Arbitrary File Download
Slug
incoming-links
Published
2015-02-01
Title
Incoming Links <= 0.9.9b - referrers.php XSS
Slug
increase-sociability
Published
2024-12-12
Title
Increase Sociability <= 1.3.0 - Reflected Cross-Site Scripting
Slug
increase-upload-file-size-maximum-execution-time-limit
Published
2024-10-10
Title
Increase upload file size & Maximum Execution Time limit < 3.0 - Reflected Cross-Site Scripting
Slug
incredible-font-awesome
Published
2025-01-16
Title
Incredible Font Awesome <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
indeed-affiliate-pro
Published
2017-07-26
Title
Ultimate Affiliate Pro WordPress Plugin < 4.0 - Authenticated Stored XSS
Slug
indeed-api
Published
2025-02-03
Title
Indeed API <= 0.5 - Cross-Site Request Forgery to Settings Update
Slug
indeed-job-importer
Published
2021-10-15
Title
Indeed Job Importer <= 1.0.5 - Admin+ Stored Cross-Site Scripting
Slug
indeed-learning-pro
Published
2025-01-03
Title
Ultimate Learning Pro <= 3.9 - Authenticated (Administrator+) SQL Injection
Slug
indeed-learning-pro
Published
2025-09-30
Title
Ultimate Learning Pro <= 3.9.3 - Authenticated (Instructor+) Arbitrary Content Deletion
Slug
indeed-membership-pro
Published
2019-02-26
Title
Ultimate Membership Pro <= 7.5 - Arbitrary media upload
Slug
indeed-membership-pro
Published
2019-02-26
Title
Ultimate Membership Pro 7.4.2 <= 7.5 - Arbitrary media include
Slug
indeed-membership-pro
Published
2020-02-06
Title
Ultimate Membership Pro < 8.6.1 - Multiple Critical Vulnerabilities
Slug
indeed-membership-pro
Published
2020-02-24
Title
Ultimate Membership Pro < 8.6.2 - Multiple CSRF Issues via AJAX Calls, Insufficient Filename Entropy
Slug
indeed-membership-pro
Published
2020-02-24
Title
Ultimate Membership Pro < 8.7 - Cross-Site Request Forgery allowing Arbitrary Account Deletion and Creation
Slug
indeed-membership-pro
Published
2024-08-12
Title
Indeed Membership Pro < 12.8 - Unauthenticated PHP Object Injection
Slug
indeed-membership-pro
Published
2024-08-12
Title
Indeed Membership Pro < 12.8 - Reflected Cross-Site Scripting
Slug
indeed-membership-pro
Published
2024-08-12
Title
Indeed Membership Pro < 12.8 - Unauthenticated Privilege Escalation
Slug
indeed-wp-superbackup
Published
2024-12-12
Title
Super Backup & Clone - Migrate for WordPress < 2.4 - Unauthenticated Arbitrary File Upload
Slug
indeed-wp-superbackup
Published
2024-12-18
Title
WP SuperBackup < 2.4 - Unauthenticated Arbitrary File Upload
Slug
indeed-wp-superbackup
Published
2024-12-18
Title
WP SuperBackup < 2.4 - Reflected Cross-Site Scripting
Slug
indeed-wp-superbackup
Published
2024-12-18
Title
WP SuperBackup < 2.4 - Missing Authorization
Slug
indeed-wp-superbackup
Published
2024-12-18
Title
WP SuperBackup < 2.4 - Authenticated (Subscriber+) PHP Object Injection