WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jiangqie-free-mini-program
Published
2024-10-15
Title
JiangQie Free Mini Program <= 2.5.2 - Unauthenticated Arbitrary File Uplaod
Slug
jiangqie-official-website-mini-program
Published
2021-07-30
Title
JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection
Slug
jiangqie-official-website-mini-program
Published
2025-03-24
Title
JiangQie Official Website Mini Program <= 1.8.2 - Authenticated (Administrator+) SQL Injection
Slug
jibu-pro
Published
2018-08-30
Title
Jibu Pro <= 1.7 - Stored XSS
Slug
jigoshop
Published
2014-08-01
Title
Jigoshop 1.8 - Multiple Script Direct Request Path Disclosure
Slug
jigoshop-exporter
Published
2024-10-30
Title
Jigoshop – Store Exporter <= 1.5.8 - Reflected Cross-Site Scripting
Slug
jigoshop-store-toolkit
Published
2024-11-04
Title
Jigoshop – Store Toolkit <= 1.4.0 - Reflected Cross-Site Scripting
Slug
jinshuju
Published
2025-09-05
Title
金数据 <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jivochat
Published
2022-05-09
Title
JivoChat < 1.3.5.4 - Stored Cross-Site Scripting via CSRF
Slug
jk-html-to-pdf
Published
2025-01-07
Title
JK Html To Pdf <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
jkdevkit
Published
2025-07-02
Title
JKDEVKIT <= 1.9.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
jlayer-parallax-slider-wp
Published
2024-10-18
Title
jLayer Parallax Slider <= 1.0 - Reflected Cross-Site Scripting
Slug
jm-twitter-cards
Published
2015-10-12
Title
JM Twitter Cards <= 6.1 - Full Path Disclosure (FPD)
Slug
jm-twitter-cards
Published
2024-03-04
Title
JM Twitter Cards < 14.1.0 - Password Protected Post Access
Slug
jma-youtube-playlists-with-schema
Published
2025-02-18
Title
YouTube Playlists with Schema <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jnews-frontend-submit
Published
2026-01-12
Title
JNews - Frontend Submit <= 11.0.0 - Reflected Cross-Site Scripting
Slug
jnews-gallery
Published
2025-12-06
Title
JNews Gallery < 12.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jnews-pay-writer
Published
2026-01-13
Title
JNews - Pay Writer <= 11.0.0 - Authenticated (Subscriber+) Local File Inclusion
Slug
jnews-paywall
Published
2025-12-06
Title
JNews Paywall < 12.0.1 - Cross-Site Request Forgery
Slug
jnews-video
Published
2026-01-13
Title
JNews - Video <= 11.0.2 - Reflected Cross-Site Scripting
Slug
joan
Published
2021-08-18
Title
Jock on air now < 5.6.3 - Authenticated Stored Cross-Site Scripting
Slug
joan
Published
2021-08-18
Title
Jock on air now < 5.6.2 - Reflected Cross-Site Scripting
Slug
joan
Published
2021-08-18
Title
Jock on air now < 5.6.2 - Arbitrary Plugin's Settings Update via CSRF
Slug
joan
Published
2025-10-02
Title
Jock On Air Now (JOAN) < 6.0.5 - Missing Authorization
Slug
job-board
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)