WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jquery-news-ticker
Published
2023-12-16
Title
Jquery news ticker < 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
jquery-reply-to-comment
Published
2021-09-21
Title
jQuery Reply to Comment <= 1.31 - CSRF to Stored Cross-Site Scripting
Slug
jquery-t-countdown-widget
Published
2023-01-12
Title
jQuery T(-) Countdown Widget < 2.3.24 - Contributor+ Stored XSS
Slug
jquery-t-countdown-widget
Published
2024-05-22
Title
jQuery T(-) Countdown Widget <= 2.3.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via tminus Shortcode
Slug
jquery-tagline-rotator
Published
2021-08-13
Title
jQuery Tagline Rotator <= 0.1.5 - Reflected Cross-Site Scripting
Slug
jquery-validation-for-contact-form-7
Published
2022-06-27
Title
Jquery Validation For Contact Form 7 < 5.3 - Arbitrary Options Update via CSRF
Slug
jquery-vertical-accordion-menu
Published
2023-09-11
Title
JQuery Accordion Menu Widget for WordPress <= 3.1.2 - Contributor+ Stored XSS
Slug
jreviews
Published
2022-10-10
Title
JReviews <= 4.1.5 - Reflected Cross-Site Scripting
Slug
jrss-widget
Published
2014-05-28
Title
Jrss Widget <= 1.2 - SSRF
Slug
js-appointment
Published
2014-08-01
Title
Js-appointment <= 1.5 - SQL Injection
Slug
js-css-script-optimizer
Published
2024-01-03
Title
JS & CSS Script Optimizer <= 0.3.3 - Cross-Site Request Forgery
Slug
js-jobs
Published
2018-05-28
Title
JS Job <= 1.0.6 - CSRF
Slug
js-jobs
Published
2021-09-30
Title
JS Job Manager < 1.1.9 - Unauthenticated Arbitrary Plugin Installation/Activation
Slug
js-jobs
Published
2023-02-21
Title
JS Job Manager < 2.0.1 - Subscriber+ Stored XSS
Slug
js-jobs
Published
2023-03-21
Title
JS Job Manager < 2.0.1 - Missing Authorization
Slug
js-jobs
Published
2023-06-02
Title
JS Job Manager < 2.0.1 - Multiple CSRF
Slug
js-jobs
Published
2025-04-04
Title
JS Job Manager <= 2.0.2 - Authenticated (Contributor+) Local File Inclusion
Slug
js-jobs
Published
2025-04-01
Title
JS Job Manager <= 2.0.2 - Missing Authorization
Slug
js-jobs
Published
2025-04-01
Title
JS Job Manager <= 2.0.2 - Authenticated Insecure Direct Object Reference
Slug
js-jobs
Published
2025-04-09
Title
JS Job Manager <= 2.0.2 - Unauthenticated Local File Inclusion
Slug
js-jobs
Published
2025-04-15
Title
JS Job Manager <= 2.0.2 - Unauthenticated SQL Injection
Slug
js-jobs
Published
2025-04-14
Title
JS Job Manager <= 2.0.2 - Unauthenticated Arbitrary File Upload
Slug
js-jobs
Published
2025-09-22
Title
JS Job Manager <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
js-multihotel
Published
2014-08-01
Title
JS MultiHotel 2.2.1 - includes/show_image.php file Parameter Remote File Inclusion DoS
Slug
js-multihotel
Published
2014-08-01
Title
JS MultiHotel 2.2.1 - includes/delete_img.php path Parameter Reflected XSS