WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ie-css3-support
Published
2025-02-14
Title
IE CSS3 Support <= 2.0.1 - Reflected Cross-Site Scripting
Slug
if-as-shortcode
Published
2025-12-25
Title
IF AS Shortcode <= 1.2 - Authenticated (Contributor+) Remote Code Execution
Slug
if-menu
Published
2024-12-06
Title
If Menu < 0.19.2 - Missing Authorization to License Key Update
Slug
if-so
Published
2023-12-27
Title
If-So Dynamic Content Personalization < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
if-so
Published
2024-05-09
Title
If-So Dynamic Content Personalization < 1.7.1.1 - Missing Authorization
Slug
if-so
Published
2024-06-22
Title
if-so < 1.8.0.4 - Admin+ Stored XSS
Slug
if-so
Published
2024-06-22
Title
if-so < 1.8.0.4 - Reflected XSS
Slug
if-so
Published
2024-05-10
Title
If-So Dynamic Content Personalization < 1.8.0.3 - Contributor+ Shortcode Stored XSS
Slug
if-so
Published
2024-11-20
Title
If-So Dynamic Content Personalization < 1.9.2.2 - Authenticated (Contributor+) Post Disclosure
Slug
if-so
Published
2025-06-12
Title
If-So Dynamic Content Personalization < 1.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
if-so
Published
2025-09-03
Title
If-So Dynamic Content Personalization < 1.9.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
if-so
Published
2026-08-07
Title
If-So Dynamic Content – Elementor & All Page Builders Personalization < 1.10.0.1 - Authenticated (Subscriber+) SQL Injection
Slug
if-so
Published
2026-09-30
Title
If-So Dynamic Content – Elementor & All Page Builders Personalization < 1.10.2 - Unauthenticated Stored Cross-Site Scripting
Slug
if-so
Published
2026-10-27
Title
If-So Dynamic Content < 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attribute
Slug
if-so
Published
2026-09-29
Title
If-So Dynamic Content 1.8 - 1.10.1 - Reflected XSS via render_ifso_shortcodes
Slug
if-so
Published
2026-09-29
Title
If-So Dynamic Content 1.9.9 - 1.10.1 - Editor+ Stored XSS via Conversion Name
Slug
if-so
Published
2026-10-05
Title
If-So Dynamic Content 1.4.4 - 1.10.1 - Reflected XSS via 'message' Parameter
Slug
if-so
Published
2026-10-27
Title
If-So Dynamic Content < 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameter
Slug
if-so
Published
2026-10-27
Title
If-So Dynamic Content < 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attribute
Slug
ifeature-slider
Published
2022-11-17
Title
iFeature Slider <= 1.2 - Contributor+ Stored XSS
Slug
iflychat
Published
2021-05-24
Title
iFlyChat – WordPress Chat < 4.7.0 - Admin+ Stored Cross-Site Scripting (XSS)
Slug
iflychat
Published
2024-03-29
Title
iFlyChat – WordPress Chat <= 4.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ifolders
Published
2023-09-25
Title
iFolders < 1.5.1 - Admin+ XSS
Slug
iframe
Published
2015-08-11
Title
iframe < 4.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
iframe
Published
2015-08-11
Title
iframe < 4.0 - Authenticated Stored Cross-Site Scripting (XSS)