WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
inprosysmedia-likes-dislikes-post
Published
2025-05-20
Title
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
Slug
inprosysmedia-likes-dislikes-post
Published
2025-05-27
Title
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
Slug
inquiry-cart
Published
2024-05-24
Title
Inquiry Cart <= 3.4.2 - Stored XSS via CSRF
Slug
insert-code
Published
2025-03-11
Title
Insert Code <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
insert-estimated-reading-time
Published
2023-10-02
Title
Insert Estimated Reading Time <= 1.2 - Admin+ Stored XSS
Slug
insert-headers-and-footers
Published
2023-02-09
Title
WPCode < 2.0.7 - Contributor+ WPCode Library Auth Key Update/Deletion
Slug
insert-headers-and-footers
Published
2023-04-03
Title
WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF
Slug
insert-headers-and-footers
Published
2023-07-17
Title
WPCode < 2.0.13.1 - Reflected XSS
Slug
insert-headers-and-footers-script
Published
2025-04-01
Title
Insert Headers and Footers Code – HT Script < 1.1.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
insert-headers-and-footers-script
Published
2025-11-07
Title
Insert Headers and Footers Code – HT Script < 1.1.7 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
insert-html-here
Published
2025-04-09
Title
Insert HTML Here <= 1.0 - Reflected Cross-Site Scripting
Slug
insert-html-snippet
Published
2016-11-29
Title
Insert Html Snippet <= 1.2 - Cross-Site Request Forgery (CSRF)
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2019-06-11
Title
Insert or Embed Articulate Content into WordPress < 4.2999 - Unauthenticated RCE
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2019-07-02
Title
Insert or Embed Articulate Content into WordPress < 4.29991 - Authenticated Arbitrary Folder Deletion and Rename
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2023-12-19
Title
Insert or Embed Articulate Content into WordPress < 4.3000000023 - Contributor+ Stored XSS
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2024-05-14
Title
Insert or Embed Articulate Content into WordPress < 4.3000000025 - Author+ Upload to RCE
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2024-05-14
Title
Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Iframe Injection
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2024-06-24
Title
Insert or Embed Articulate Content into WordPress < 4.3000000024 - Author+ Arbitrary File Upload
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2025-04-08
Title
Insert or Embed Articulate Content into WordPress < 4.3000000026 - Editor+ Arbitrary File Upload
Slug
insert-pages
Published
2017-09-29
Title
Insert Pages < 3.2.4 - Directory Traversal
Slug
insert-pages
Published
2021-10-18
Title
Insert Pages < 3.7.0 - Contributor+ Arbitrary Posts/Pages Access
Slug
insert-pages
Published
2021-10-18
Title
Insert Pages < 3.7.0 - Contributor+ Stored Cross-Site Scripting