WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jc-importer
Published
2022-04-11
Title
Import WP < 2.4.6 - Admin+ Arbitrary File Upload to RCE
Slug
jc-importer
Published
2024-04-03
Title
Import WP < 2.13.1 - Admin+ Server-side Request Forgery
Slug
jc-importer
Published
2025-01-24
Title
Import WP – Export and Import CSV and XML files to WordPress < 2.14.6 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
jc-importer
Published
2025-10-31
Title
Import WP – Export and Import CSV and XML files to WordPress < 2.14.17 - Authenticated (Admin+) Arbitrary File Read
Slug
jc-importer
Published
2025-11-20
Title
Import WP – Export and Import CSV and XML files to WordPress < 2.14.18 - Unauthenticated Information Exposure
Slug
jc-importer
Published
2026-08-10
Title
Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download
Slug
jcarousel-for-wordpress
Published
2024-12-12
Title
jCarousel <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
jch-optimize
Published
2023-03-02
Title
JCH Optimize < 3.2.3 - Admin+ Stored XSS
Slug
jch-optimize
Published
2024-05-13
Title
JCH Optimize < 4.2.1 - Authenticated (Subscriber+) Directory Traversal
Slug
jch-optimize
Published
2026-09-03
Title
JCH Optimize 4.2.1 - 5.0.0 - Admin+ Path Traversal
Slug
jch-optimize
Published
2026-09-03
Title
JCH Optimize < 6.0.1 - Subscriber+ Stored XSS via getcacheinfo Task Override
Slug
jcwp-youtube-channel-embed
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
jds-portfolio
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
jeba-cute-forkit
Published
2025-11-10
Title
Jeba Cute forkit <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
jeeng-push-notifications
Published
2022-11-02
Title
Jeeng Push Notifications < 2.0.4 - Admin+ Stored Cross-Site Scripting
Slug
jeg-elementor-kit
Published
2022-11-04
Title
Jeg Elementor Kit < 2.5.7 - Subscriber+ Authorization Bypass
Slug
jeg-elementor-kit
Published
2022-11-04
Title
Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update
Slug
jeg-elementor-kit
Published
2024-02-27
Title
Jeg Elementor Kit < 2.6.3 - Contributor+ Stored Cross-Site Scripting
Slug
jeg-elementor-kit
Published
2024-04-02
Title
Jeg Elementor Kit < 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial
Slug
jeg-elementor-kit
Published
2024-04-02
Title
Jeg Elementor Kit < 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box
Slug
jeg-elementor-kit
Published
2024-04-26
Title
Jeg Elementor Kit < 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner
Slug
jeg-elementor-kit
Published
2024-04-30
Title
Jeg Elementor Kit < 2.6.5 - Contributor+ Stored XSS via Countdown Widget
Slug
jeg-elementor-kit
Published
2024-04-30
Title
Jeg Elementor Kit < 2.6.5 - Contributor+ Stored XSS via Elementor Widget URL Custom Attributes
Slug
jeg-elementor-kit
Published
2024-06-14
Title
Jeg Elementor Kit < 2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets
Slug
jeg-elementor-kit
Published
2024-08-26
Title
Jeg Elementor Kit < 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File