WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ip2location-country-blocker
Published
2025-02-21
Title
IP2Location Country Blocker < 2.38.9 - Unauthenticated Information Disclosure
Slug
ip2location-redirection
Published
2025-02-28
Title
IP2Location Redirection < 1.33.4 - Missing Authorization to Unauthenticated Settings Export
Slug
ip2location-variables
Published
2025-04-17
Title
IP2Location Variables < 2.9.6 - Cross-Site Request Forgery
Slug
ip2location-world-clock
Published
2025-04-09
Title
IP2Location World Clock < 1.1.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ipages-flipbook
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
ipages-flipbook
Published
2022-12-16
Title
iPages Flipbook For WordPress < 1.4.7 - Contributor+ Stored XSS
Slug
ipages-flipbook
Published
2023-11-03
Title
iPages Flipbook < 1.5.0 - Authenticated (Administrator+) SQL Injection
Slug
ipages-flipbook
Published
2024-04-29
Title
iPages Flipbook < 1.5.2 - Missing Authorization
Slug
ipages-flipbook-pro
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2022-12-16
Title
iPanorama 360 WordPress Virtual Tour Builder < 1.6.30 - Contributor+ Stored XSS
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2023-10-18
Title
iPanorama 360 – WordPress Virtual Tour Builder < 1.8.1 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2023-09-22
Title
iPanorama 360 – WordPress Virtual Tour Builder < 1.8.0 - Authenticated (Admin+) SQL injection
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2024-04-30
Title
iPanorama 360 WordPress Virtual Tour Builder < 1.8.2 - Missing Authorization
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2024-07-10
Title
iPanorama 360 WordPress Virtual Tour Builder < 1.8.4 - Missing Authorization
Slug
ipanorama-pro
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
ipaymu-for-woocommerce
Published
2026-01-06
Title
iPaymu Payment Gateway for WooCommerce < 2.0.3 - Missing Authentication to Unauthenticated Payment Bypass and Order Information Disclosure
Slug
ipblocklist
Published
2022-12-14
Title
ipBlockList <= 1.0 - CSRF
Slug
ipfeuilledechou
Published
2014-08-01
Title
ipfeuilledechou - SQL Injection
Slug
iphone-webclip-manager
Published
2024-11-23
Title
iPhone Webclip Manager <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ipushpull
Published
2023-10-30
Title
Live updates from Excel < 2.3.3 - Contributor+ Stored Cross-Site Scripting
Slug
iq-block-country
Published
2015-08-24
Title
iQ Block Country < 1.1.20 - Reflected Cross-Site Scripting (XSS)
Slug
iq-block-country
Published
2021-07-17
Title
iQ Block Country < 1.2.12 - Admin+ Stored Cross-Site Scripting
Slug
iq-block-country
Published
2022-03-16
Title
iQ Block Country < 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip
Slug
iq-block-country
Published
2022-05-17
Title
iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing