WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
joliprint
Published
2014-08-01
Title
PDF And Print Button Joliprint <= 1.3.0 - Cross Site Scripting
Slug
jonradio-private-site
Published
2022-06-01
Title
My Private Site < 3.0.8 - Arbitrary Settings Update via CSRF
Slug
jonradio-private-site
Published
2024-02-16
Title
My Private Site < 3.1.0 - Improper Access Control to Sensitive Information Exposure via REST API
Slug
jonradio-private-site
Published
2026-09-03
Title
My Private Site < 4.2.3 - Unauthenticated Sensitive Information Exposure via RSS Feeds and Sitemap
Slug
joomdev-wp-pros-cons
Published
2024-03-29
Title
Mighty Classic Pros And Cons <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
joomsport-sports-league-results-management
Published
2019-08-07
Title
JoomSport <= 3.3 - SQL Injection
Slug
joomsport-sports-league-results-management
Published
2021-06-08
Title
JoomSport < 5.1.8 - Unauthenticated PHP Object Injection
Slug
joomsport-sports-league-results-management
Published
2022-08-08
Title
JoomSport < 5.2.6 - Admin+ SQLi
Slug
joomsport-sports-league-results-management
Published
2022-11-28
Title
JoomSport < 5.2.8 - Unauthenticated SQLi
Slug
joomsport-sports-league-results-management
Published
2024-08-16
Title
JoomSport < 5.5.7 - Missing Authorization
Slug
joomsport-sports-league-results-management
Published
2024-09-24
Title
JoomSport < 5.6.4 - Missing Authorization
Slug
joomsport-sports-league-results-management
Published
2025-01-06
Title
JoomSport < 5.6.18 - Reflected Cross-Site Scripting via page
Slug
joomsport-sports-league-results-management
Published
2025-10-02
Title
JoomSport < 5.7.4 - Unauthenticated Directory Traversal to Local File Inclusion
Slug
joomsport-sports-league-results-management
Published
2026-04-29
Title
JoomSport – for Sports: Team & League, Football, Hockey & more < 5.7.8 - Unauthenticated SQL Injection
Slug
joomsport-sports-league-results-management
Published
2026-05-12
Title
JoomSport < 5.7.8 - Unauthenticated SQL Injection via 'sortf' Parameter
Slug
joomsport-sports-league-results-management
Published
2026-06-30
Title
JoomSport < 5.7.9 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action
Slug
joomsport-sports-league-results-management
Published
2026-07-01
Title
JoomSport < 5.7.9 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action
Slug
joomsport-sports-league-results-management
Published
2026-07-09
Title
JoomSport < 5.7.10 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute
Slug
joomsport-sports-league-results-management
Published
2026-08-04
Title
JoomSport < 5.7.10 - Authenticated (Administrator+) SQL Injection via 'order' Parameter
Slug
joomsport-sports-league-results-management
Published
2026-10-28
Title
JoomSport < 5.7.14 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute
Slug
joomsport-sports-league-results-management
Published
2026-10-29
Title
JoomSport < 5.7.15 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode Attribute
Slug
jotform-ai-chatbot
Published
2026-10-06
Title
Jotform – AI Chatbot < 3.8.4 - Unauthenticated Stored Cross-Site Scripting
Slug
journalist-ai
Published
2026-08-10
Title
Arvow AI SEO Writer < 1.5.4 - Missing Authorization
Slug
journalist-ai
Published
2026-08-05
Title
Arvow AI SEO Writer < 1.5.4 - Unauthenticated Arbitrary Post Creation via Webhook Secret Type-Juggling
Slug
journey-analytics
Published
2021-06-30
Title
Journey Analytics < 1.0.13 - Unauthorised AJAX call via CSRF