WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
insert-pages
Published
2023-01-04
Title
Insert Pages < 3.7.5 - Contributor+ Stored XSS
Slug
insert-php
Published
2019-08-02
Title
Woody Ad Snippets < 2.2.5 - Multiple issues leading to RCE
Slug
insert-php
Published
2019-09-13
Title
Woody Ad Snippets < 2.2.9 - Authenticated Cross-Site Scripting (XSS)
Slug
insert-php
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
insert-php
Published
2019-08-09
Title
Woody Ad Snippets < 2.2.6 - Arbitrary Post Deletion
Slug
insert-php
Published
2022-06-14
Title
Woody Code Snippets < 2.4.6 - Reflected Cross-Site Scripting
Slug
insert-php
Published
2020-09-16
Title
Woody code snippets < 2.3.10 - Arbitrary Settings Update via CSRF
Slug
insert-php
Published
2024-06-06
Title
Woody code snippets – Insert Header Footer Code, AdSense Ads < 2.5.1 - Admin+ Stored XSS
Slug
insert-php
Published
2024-06-14
Title
Woody code snippets – Insert Header Footer Code, AdSense Ads < 2.5.1 -Authenticated (Contributor+) Remote Code Execution
Slug
insert-php-code-snippet
Published
2024-02-09
Title
Insert PHP Code Snippet < 1.3.5 - Admin+ Stored XSS
Slug
insert-php-code-snippet
Published
2024-08-14
Title
Insert PHP Code Snippet < 1.3.7 - Cross-Site Request Forgery to Code Snippet Activate/Deactivate/Deletion
Slug
insert-php-code-snippet
Published
2025-10-27
Title
Insert PHP Code Snippet < 1.4.4 - Missing Authorization
Slug
insert-post-ads
Published
2024-06-03
Title
Insert Post Ads <= 1.3.2 - Missing Authorization
Slug
insertify
Published
2024-12-11
Title
Insertify <= 1.1.4 - Cross-Site Request Forgery to Remote Code Execution
Slug
insight-core
Published
2021-12-28
Title
Insight Core <= 1.0 - Subscriber+ PHP Object Injection & Stored XSS
Slug
inspectlet-heatmaps-and-user-session-recording
Published
2025-08-14
Title
Inspectlet - User Session Recording and Heatmaps <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
inspirational-quote-rotator
Published
2021-11-15
Title
Inspirational Quote Rotator <= 1.0.0 - Admin+ Stored Cross-Site Scripting
Slug
insta-gallery
Published
2019-08-12
Title
WP Social Feed Gallery < 2.4.8 - CSRF & Missing Authorisation Checks
Slug
insta-gallery
Published
2024-08-01
Title
WP Social Feed Gallery < 4.4.0 - Missing Authorization
Slug
insta-gallery
Published
2025-10-24
Title
Social Feed Gallery < 4.9.3 - Missing Authorization to Unauthenticated Information Exposure
Slug
instabot
Published
2025-01-07
Title
Instabot <= 1.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
instagram-feed
Published
2016-11-19
Title
Instagram Feed < 1.4.7 - Authenticated Cross-Site Scripting (XSS) & CSRF
Slug
instagram-feed
Published
2018-01-18
Title
Instagram Feed < 1.6 - Cross-Site Scripting (XSS)
Slug
instagram-feed
Published
2019-02-04
Title
Instagram Feed < 1.12 - Unspecified Issues
Slug
instagram-feed
Published
2021-07-20
Title
Multiple Plugins from Smash Balloon - Reflected Cross-Site Scripting