WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jobmonster-addon
Published
2025-12-12
Title
Jobmonster Elementor Addon < 1.1.5 - Authenticated (Contributor+) Local File Inclusion
Slug
jobwp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
jobwp
Published
2023-11-23
Title
WordPress Job Board and Recruitment Plugin – JobWP < 2.2 - Sensitive Information Exposure
Slug
jobwp
Published
2025-04-18
Title
JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin < 2.4.0 - Unauthenticated SQL Injection
Slug
jobwp
Published
2025-04-04
Title
JobWP < 2.4.0 - Cross-Site Request Forgery
Slug
jobwp
Published
2025-06-19
Title
JobWP < 2.4.1 - Cross-Site Request Forgery
Slug
jobwp
Published
2025-08-22
Title
JobWP < 2.4.4 - Cross-Site Request Forgery
Slug
jobwp
Published
2026-01-21
Title
JobWP < 2.4.6 - Unauthenticated Stored Cross-Site Scripting
Slug
joli-clear-lightbox
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
joli-clear-lightbox
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
joli-faq-seo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
joli-faq-seo
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
joli-faq-seo
Published
2024-05-07
Title
Joli FAQ SEO – WordPress FAQ Plugin < 1.3.3 - Cross-Site Request Forgery
Slug
joli-table-of-contents
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
joli-table-of-contents
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
joliprint
Published
2014-08-01
Title
PDF And Print Button Joliprint <= 1.3.0 - Cross Site Scripting
Slug
jonradio-private-site
Published
2022-06-01
Title
My Private Site < 3.0.8 - Arbitrary Settings Update via CSRF
Slug
jonradio-private-site
Published
2024-02-16
Title
My Private Site < 3.1.0 - Improper Access Control to Sensitive Information Exposure via REST API
Slug
joomdev-wp-pros-cons
Published
2024-03-29
Title
Mighty Classic Pros And Cons <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
joomsport-sports-league-results-management
Published
2019-08-07
Title
JoomSport <= 3.3 - SQL Injection
Slug
joomsport-sports-league-results-management
Published
2021-06-08
Title
JoomSport < 5.1.8 - Unauthenticated PHP Object Injection
Slug
joomsport-sports-league-results-management
Published
2022-08-08
Title
JoomSport < 5.2.6 - Admin+ SQLi
Slug
joomsport-sports-league-results-management
Published
2022-11-28
Title
JoomSport < 5.2.8 - Unauthenticated SQLi
Slug
joomsport-sports-league-results-management
Published
2024-08-16
Title
JoomSport < 5.5.7 - Missing Authorization
Slug
joomsport-sports-league-results-management
Published
2024-09-24
Title
JoomSport < 5.6.4 - Missing Authorization