WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
insert-headers-and-footers
Published
2026-05-26
Title
WPCode < 2.3.6 - Author+ Remote Code Execution via XML-RPC wp.newPost
Slug
insert-headers-and-footers-script
Published
2025-04-01
Title
Insert Headers and Footers Code – HT Script < 1.1.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
insert-headers-and-footers-script
Published
2025-11-07
Title
Insert Headers and Footers Code – HT Script < 1.1.7 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
insert-headers-and-footers-script
Published
2026-07-27
Title
Insert Headers and Footers Code – HT Script < 1.1.9 - Cross-Site Request Forgery
Slug
insert-html-here
Published
2025-04-09
Title
Insert HTML Here <= 1.0 - Reflected Cross-Site Scripting
Slug
insert-html-snippet
Published
2016-11-29
Title
Insert Html Snippet <= 1.2 - Cross-Site Request Forgery (CSRF)
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2019-06-11
Title
Insert or Embed Articulate Content into WordPress < 4.2999 - Unauthenticated RCE
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2019-07-02
Title
Insert or Embed Articulate Content into WordPress < 4.29991 - Authenticated Arbitrary Folder Deletion and Rename
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2023-12-19
Title
Insert or Embed Articulate Content into WordPress < 4.3000000023 - Contributor+ Stored XSS
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2024-05-14
Title
Insert or Embed Articulate Content into WordPress < 4.3000000025 - Author+ Upload to RCE
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2024-05-14
Title
Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Iframe Injection
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2024-06-24
Title
Insert or Embed Articulate Content into WordPress < 4.3000000024 - Author+ Arbitrary File Upload
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2025-04-08
Title
Insert or Embed Articulate Content into WordPress < 4.3000000026 - Editor+ Arbitrary File Upload
Slug
insert-or-embed-articulate-content-into-wordpress
Published
2026-07-24
Title
Insert or Embed Articulate Content into WordPress <= 4.3000000027 - Editor+ Arbitrary File Upload
Slug
insert-pages
Published
2017-09-29
Title
Insert Pages < 3.2.4 - Directory Traversal
Slug
insert-pages
Published
2021-10-18
Title
Insert Pages < 3.7.0 - Contributor+ Arbitrary Posts/Pages Access
Slug
insert-pages
Published
2021-10-18
Title
Insert Pages < 3.7.0 - Contributor+ Stored Cross-Site Scripting
Slug
insert-pages
Published
2023-01-04
Title
Insert Pages < 3.7.5 - Contributor+ Stored XSS
Slug
insert-pages
Published
2026-07-01
Title
Insert Pages < 3.11.5 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Field Keys (Meta Key Names)
Slug
insert-php
Published
2019-08-02
Title
Woody Ad Snippets < 2.2.5 - Multiple issues leading to RCE
Slug
insert-php
Published
2019-09-13
Title
Woody Ad Snippets < 2.2.9 - Authenticated Cross-Site Scripting (XSS)
Slug
insert-php
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)