WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
iwp-client
Published
2025-01-07
Title
InfiniteWP Client < 1.13.1 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading
Slug
iwp-client
Published
2026-08-20
Title
InfiniteWP Client < 1.13.10 - Authenticated (Administrator+) SQL Injection
Slug
iwp-client
Published
2026-08-04
Title
InfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite
Slug
iwr-tooltip
Published
2026-05-26
Title
iWR Tooltip <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
iws-geo-form-fields
Published
2022-11-30
Title
IWS - Geo Form Fields <= 1.0 - Unauthenticated SQLi
Slug
ixml
Published
2026-02-18
Title
iXML – Google XML sitemap generator <= 0.6 - Reflected Cross-Site Scripting via 'iXML_email' Parameter
Slug
izeechat
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
izooto-web-push
Published
2026-02-19
Title
iZooto < 3.7.21 - Missing Authorization