WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
icount
Published
2025-06-27
Title
iCount Payment Gateway <= 2.0.6 - Missing Authorization
Slug
ics-button
Published
2025-01-07
Title
ICS Button <= 0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ics-calendar
Published
2023-10-23
Title
ICS Calendar < 10.12.0.2 - Authenticated(Contributor+) Directory Traversal via _url_get_contents
Slug
ics-calendar
Published
2026-07-10
Title
ICS Calendar < 12.1.1.1 - Unauthenticated Stored Cross-Site Scripting
Slug
ics-calendar
Published
2026-07-09
Title
ICS Calendar < 12.0.9.2 - Reflected Cross-Site Scripting via 'htmltagtitle' Parameter
Slug
icustomizer
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
id-arrays
Published
2026-01-29
Title
ID Arrays <= 2.1.2 - Reflected Cross-Site Scripting
Slug
idbbee
Published
2023-10-30
Title
idbbee <= 1.0 - Contributor+ Stored Cross-Site Scripting
Slug
idcrm-contacts-companies
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ideal-interactive-map
Published
2024-01-03
Title
Ideal Interactive Map <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ideal-wp-login-logo-changer
Published
2025-03-27
Title
Custom Login Logo < 1.1.8 - Cross-Site Request Forgery
Slug
idealien-category-enhancements
Published
2024-11-23
Title
Idealien Category Enhancements <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ideapush
Published
2023-11-08
Title
IdeaPush < 8.53 - Admin+ Stored XSS
Slug
ideapush
Published
2023-11-28
Title
IdeaPush < 8.58 - Subscriber+ Memory Tab/Routine/Taxonomy Creation
Slug
ideapush
Published
2024-06-27
Title
IdeaPush < 8.61 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
ideapush
Published
2024-07-01
Title
IdeaPush < 8.66 - Unauthenticated Stored Cross-Site Scripting
Slug
ideapush
Published
2024-09-23
Title
IdeaPush < 8.69 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ideapush
Published
2024-10-14
Title
IdeaPush < 8.71 - Cross-Site Request Forgery
Slug
ideapush
Published
2024-12-02
Title
IdeaPush < 8.72 - Missing Authorization to Board Term Deletion
Slug
ideapush
Published
2024-12-27
Title
IdeaPush < 8.73 - Missing Authorization
Slug
ider-login
Published
2024-12-13
Title
IDer Login for WordPress <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
idonate
Published
2024-05-01
Title
IDonate < 2.0.0 - Admin+ Stored XSS
Slug
idonate
Published
2025-04-09
Title
IDonate <= 2.1.17 - Unauthenticated Local File Inclusion
Slug
idonate
Published
2025-07-31
Title
IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function
Slug
idonate
Published
2025-10-06
Title
IDonate < 2.1.13 - Unauthenticated User Deletion