WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
koalendar-free-booking-widget
Published
2024-12-13
Title
Koalendar < 1.0.3 - Contributor+ Stored XSS via height Parameter
Slug
kodex-posts-likes
Published
2023-04-19
Title
Kodex Posts likes < 2.5.0 - Settings Update via CSRF
Slug
kodex-posts-likes
Published
2024-08-09
Title
Kodex Posts likes <= 2.5.0 - Reflected Cross-Site Scripting
Slug
kodex-posts-likes
Published
2024-09-24
Title
Kodex Posts likes <= 2.5.0 - Reflected Cross-Site Scripting
Slug
kodex-posts-likes
Published
2024-09-23
Title
Kodex Posts likes <= 2.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
kodex-posts-likes
Published
2024-10-24
Title
Kodex Posts likes <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kodo-qiniu
Published
2024-02-23
Title
KODO Qiniu < 1.5.1 - Cross-Site Request Forgery
Slug
koko-analytics
Published
2024-09-23
Title
Koko Analytics < 1.3.13 - Reflected Cross-Site Scripting
Slug
koko-analytics
Published
2026-01-20
Title
Koko Analytics < 2.1.3 - Unauthenticated SQL Injection
Slug
kona-instagram-feed-for-gutenberg
Published
2025-01-30
Title
Kona Gallery Block <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kona-instagram-feed-for-gutenberg
Published
2025-02-03
Title
Kona Gallery Block <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
konami-easter-egg
Published
2025-06-05
Title
Konami Easter Egg <= v0.4 - Cross-Site Request Forgery
Slug
konnichiwa
Published
2021-09-08
Title
Konnichiwa! Membership <= 0.8.3 - Reflected Cross-Site Scripting
Slug
kontur-admin-style
Published
2025-09-26
Title
kontur Admin Style < 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
kontxt-semantic-engine
Published
2021-06-30
Title
KONTXT Improves WordPress Search <= 1.4.6 - CSRF Bypass
Slug
kopa-nictitate-toolkit
Published
2025-01-16
Title
Kopa Nictitate Toolkit <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kopatheme
Published
2023-05-24
Title
Kopa Framework <= 1.3.5 - Cross-Site Request Forgery
Slug
korea-for-woocommerce
Published
2025-01-06
Title
Korea for WooCommerce < 1.1.12 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
korea-sns
Published
2023-11-08
Title
Korea SNS < 1.6.5 - Settings Update via CSRF
Slug
korea-sns
Published
2026-02-18
Title
Korea SNS <= 1.7.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
kp-fastest-tawk-to-chat
Published
2023-11-29
Title
KP Fastest Tawk.to Chat <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
kraken-image-optimizer
Published
2022-09-23
Title
Kraken.io Image Optimizer < 2.6.6 - Settings Update via CSRF
Slug
kredeum-nfts
Published
2024-12-13
Title
Kredeum NFTs, the easiest way to sell your NFTs directly on your WordPress site < 1.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
krsp-frontend-file-upload
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
krsp-frontend-file-upload
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update