WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2019-06-11
Title
Insert or Embed Articulate Content into WordPress < 4.2999 - Unauthenticated RCE
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2019-07-02
Title
Insert or Embed Articulate Content into WordPress < 4.29991 - Authenticated Arbitrary Folder Deletion and Rename
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2023-12-19
Title
Insert or Embed Articulate Content into WordPress < 4.3000000023 - Contributor+ Stored XSS
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2024-05-14
Title
Insert or Embed Articulate Content into WordPress < 4.3000000025 - Author+ Upload to RCE
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2024-05-14
Title
Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Iframe Injection
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2024-06-24
Title
Insert or Embed Articulate Content into WordPress < 4.3000000024 - Author+ Arbitrary File Upload
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2025-04-08
Title
Insert or Embed Articulate Content into WordPress < 4.3000000026 - Editor+ Arbitrary File Upload
Slug
insert-pages
Published
2017-09-29
Title
Insert Pages < 3.2.4 - Directory Traversal
Slug
insert-pages
Published
2021-10-18
Title
Insert Pages < 3.7.0 - Contributor+ Arbitrary Posts/Pages Access
Slug
insert-pages
Published
2021-10-18
Title
Insert Pages < 3.7.0 - Contributor+ Stored Cross-Site Scripting
Slug
insert-pages
Published
2023-01-04
Title
Insert Pages < 3.7.5 - Contributor+ Stored XSS
Slug
insert-php
Published
2019-08-02
Title
Woody Ad Snippets < 2.2.5 - Multiple issues leading to RCE
Slug
insert-php
Published
2019-09-13
Title
Woody Ad Snippets < 2.2.9 - Authenticated Cross-Site Scripting (XSS)
Slug
insert-php
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
insert-php
Published
2019-08-09
Title
Woody Ad Snippets < 2.2.6 - Arbitrary Post Deletion
Slug
insert-php
Published
2022-06-14
Title
Woody Code Snippets < 2.4.6 - Reflected Cross-Site Scripting
Slug
insert-php
Published
2020-09-16
Title
Woody code snippets < 2.3.10 - Arbitrary Settings Update via CSRF
Slug
insert-php
Published
2024-06-06
Title
Woody code snippets – Insert Header Footer Code, AdSense Ads < 2.5.1 - Admin+ Stored XSS
Slug
insert-php
Published
2024-06-14
Title
Woody code snippets – Insert Header Footer Code, AdSense Ads < 2.5.1 -Authenticated (Contributor+) Remote Code Execution
Slug
insert-php-code-snippet
Published
2024-02-09
Title
Insert PHP Code Snippet < 1.3.5 - Admin+ Stored XSS
Slug
insert-php-code-snippet
Published
2024-08-14
Title
Insert PHP Code Snippet < 1.3.7 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion
Slug
insert-php-code-snippet
Published
2025-10-27
Title
Insert PHP Code Snippet < 1.4.4 - Missing Authorization
Slug
insert-post-ads
Published
2024-06-03
Title
Insert Post Ads <= 1.3.2 - Missing Authorization