WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
invisible-optin
Published
2025-08-25
Title
Invisible Optin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
invit0r
Published
2014-08-01
Title
Invit0r 0.22 - Shell Upload
Slug
invitation-based-registrations
Published
2022-07-05
Title
Invitation Based Registrations <= 2.2.84 - Admin+ Stored Cross-Site Scripting
Slug
invitation-code-content-access
Published
2024-03-20
Title
Invitation Code Content Restriction Plugin from CreativeMinds < 1.5.5 - Reflected Cross-Site Scripting
Slug
invite-anyone
Published
2017-03-17
Title
Invite Anyone <= 1.3.14 - Change of Email Invitation Content
Slug
invite-anyone
Published
2017-10-12
Title
Invite Anyone <= 1.3.18 - Unauthenticated PHP Object Injection
Slug
invite-anyone
Published
2017-03-22
Title
Invite Anyone < 1.3.16 - Multiple Issues
Slug
invite-anyone
Published
2024-08-16
Title
Invite Anyone < 1.4.8 - Reflected Cross-Site Scripting
Slug
invition-print-ship
Published
2025-08-27
Title
Printeers Print & Ship <= 1.17.0 - Unauthenticated Path Traversal
Slug
invition-print-ship
Published
2025-09-22
Title
Printeers Print & Ship <= 1.17.0 - Cross-Site Request Forgery
Slug
invoice-payment-for-woocommerce
Published
2024-12-11
Title
Invoice Payment for WooCommerce < 2.0.0 - Reflected Cross-Site Scripting
Slug
invoice-payment-for-woocommerce
Published
2026-01-26
Title
Link Invoice Payment for WooCommerce < 2.8.1 - Missing Authorization to Unauthenticated Arbitrary Partial Payment Creation/Cancellation
Slug
invoicing
Published
2021-06-02
Title
GetPaid < 2.3.4 - Authenticated Stored XSS
Slug
invoicing
Published
2024-08-28
Title
GetPaid < 2.8.12 - Missing Authorization via column_subscription()
Slug
ioncube-tester-plus
Published
2026-03-04
Title
ionCube Tester Plus < 1.4 - Unauthenticated Arbitrary File Download
Slug
ione360-configurator
Published
2025-04-10
Title
iONE360 configurator <= 2.0.57 - Reflected Cross-Site Scripting
Slug
ione360-configurator
Published
2026-02-10
Title
iONE360 configurator <= 2.0.57 - Unauthenticated Stored Cross-Site Scripting via Contact Form Parameters
Slug
ip-address-blocker
Published
2019-06-15
Title
IP Address Blocker < 10.5 - CSRF leading to Arbitrary File Upload
Slug
ip-address-blocker
Published
2023-03-28
Title
IP Blocker Lite <= 11.1.1 - Cross-Site Request Forgery
Slug
ip-address-blocker
Published
2024-03-28
Title
IP Blocker Lite <= 11.1.1 - IP Spoofing
Slug
ip-based-login
Published
2025-03-04
Title
IP Based Login < 2.4.1 - Log Deletion via CSRF
Slug
ip-based-login
Published
2024-11-14
Title
IP Based Login < 2.4.1 - Admin+ Stored XSS
Slug
ip-based-login
Published
2025-06-19
Title
IP Based Login < 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ip-based-login
Published
2025-09-22
Title
IP Based Login < 2.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ip-blacklist-cloud
Published
2015-02-26
Title
IP Blacklist Cloud <= 3.4 - SQL Injection