WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
image-carousel-shortcode
Published
2024-11-08
Title
Image Carousel Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-classify
Published
2024-11-08
Title
Image Classify <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
image-cleanup
Published
2025-06-27
Title
Image Cleanup <= 1.9.2 - Cross-Site Request Forgery
Slug
image-cleanup
Published
2025-12-04
Title
Image Cleanup <= 1.9.2 - Missing Authorization
Slug
image-cleanup
Published
2025-12-04
Title
Image Cleanup <= 1.9.2 - Unauthenticated Information Exposure
Slug
image-compare-block
Published
2025-09-22
Title
Beaf <= 1.6.2 - Authenticated (Admin+) Server-Side Request Forgery
Slug
image-comparison-elementor-addon
Published
2025-11-03
Title
Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload
Slug
image-content-show-hover
Published
2025-04-24
Title
Image Style Hover <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-editor-by-pixo
Published
2025-06-25
Title
Image Editor by Pixo < 2.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via download Parameter
Slug
image-editor-by-pixo
Published
2025-09-22
Title
Image Editor by Pixo <= 2.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-export
Published
2015-07-05
Title
Image Export <= 1.1.0 - Directory Traversal
Slug
image-gallery
Published
2024-10-11
Title
ImagePress – Image Gallery < 1.3.0 - Cross-Site Request Forgery to Plugin Settings Update
Slug
image-gallery
Published
2024-10-11
Title
ImagePress - Image Gallery < 1.3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Post Title Update
Slug
image-gallery
Published
2024-10-11
Title
ImagePress - Image Gallery < 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
Slug
image-gallery-box-by-crudlab
Published
2025-01-16
Title
Image Gallery Box by CRUDLab <= 1.0.3 - Authenticated (Subscriber+) Local File Inclusion
Slug
image-gallery-with-slideshow
Published
2014-08-01
Title
image-gallery-with-slideshow <= 1.5 - Arbitrary File Upload / SQL Injection
Slug
image-gallery-with-slideshow
Published
2017-04-01
Title
Image Gallery with Slideshow <= 1.5.2 - Multiple XSS and SQL Injection
Slug
image-horizontal-reel-scroll-slideshow
Published
2023-10-30
Title
Image horizontal reel scroll slideshow < 13.3 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
image-horizontal-reel-scroll-slideshow
Published
2023-12-16
Title
Image horizontal reel scroll slideshow < 13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
image-horizontal-reel-scroll-slideshow
Published
2024-11-20
Title
Image horizontal reel scroll slideshow <= 13.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
image-hover-effects
Published
2022-11-16
Title
Image Hover Effects < 5.5 - Admin+ Stored XSS
Slug
image-hover-effects
Published
2023-11-07
Title
Image Hover Effects < 5.6 - Caption Settings Update via CSRF
Slug
image-hover-effects-addon-for-elementor
Published
2021-04-13
Title
Image Hover Effects - Elementor Addon < 1.3.4 - Contributor+ Stored XSS
Slug
image-hover-effects-addon-for-elementor
Published
2024-03-25
Title
Image Hover Effects – Elementor Addon < 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'eihe_align'
Slug
image-hover-effects-addon-for-elementor
Published
2024-05-06
Title
Image Hover Effects - Elementor Addon < 1.4.2 - Authenticated(Contributor+) DOM-based Stored Cross-Site Scripting via Image Hover Effects Widget