WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ig-shortcodes
Published
2025-03-24
Title
IG Shortcodes <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
igit-related-posts-with-thumb-images-after-posts
Published
2025-05-02
Title
IGIT Related Posts With Thumb Image After Posts <= 4.5.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
igms-direct-booking
Published
2026-02-15
Title
iGMS Direct Booking <= 1.3 - Missing Authorization
Slug
igniteup
Published
2019-11-10
Title
IgniteUp < 3.4.1 - Multiple Issues
Slug
igniteup
Published
2022-04-13
Title
IgniteUp <= 3.4.1 - Admin+ Stored Cross-Site Scripting
Slug
ignitiondeck
Published
2014-08-01
Title
IgnitionDeck 1.1 - Purchase Form Unspecified XSS
Slug
ignitiondeck
Published
2024-07-26
Title
IgnitionDeck Crowdfunding Platform < 1.10.0 - Missing Authorization
Slug
ignitiondeck
Published
2025-10-04
Title
IgnitionDeck <= 2.0.10 - Missing Authorization
Slug
igumbi-online-booking
Published
2025-02-20
Title
igumbi Online Booking < 1.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
iks-menu
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
iks-menu
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
iksweb
Published
2023-02-21
Title
Старт < 3.8 - Admin+ Stored XSS
Slug
ilab-media-tools
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ilab-media-tools
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ilab-media-tools
Published
2024-03-25
Title
Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more < 4.5.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ilc-thickbox
Published
2024-08-22
Title
ILC Thickbox <= 1.0 - Settings update via CSRF
Slug
ilive
Published
2019-06-25
Title
iLive <= 1.0.4 - Stored Cross-Site Scripting (XSS)
Slug
ilogic-accessibility
Published
2025-12-31
Title
Accessibility Press <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
iloveimg
Published
2023-11-13
Title
Image Compressor & Optimizer - iLoveIMG < 1.0.6 - Admin+ PHP Object Injection
Slug
image-alt-text
Published
2024-11-27
Title
Image Alt Text < 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Image Alt Text Update
Slug
image-captcha
Published
2025-03-24
Title
Image Captcha <= 1.2 - Cross-Site Request Forgery
Slug
image-caption-hover-pro
Published
2025-12-15
Title
Image Caption Hover Pro < 20.0 - Missing Authorization
Slug
image-carousel
Published
2026-06-26
Title
Image Carousel <= 1.0.0.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-carousel-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
image-carousel-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting