WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kubio
Published
2026-08-15
Title
Kubio AI Page Builder < 2.8.6 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action
Slug
kubio
Published
2026-08-31
Title
Kubio AI Page Builder < 2.9.1 - Admin+ DoS
Slug
kubio
Published
2026-10-01
Title
Kubio AI Page Builder < 2.9.3 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass)
Slug
kubio
Published
2026-10-04
Title
Kubio AI Page Builder < 2.9.4 - Unauthenticated Stored Cross-Site Scripting
Slug
kubio
Published
2026-09-17
Title
Kubio AI Page Builder < 2.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block Content
Slug
kubio
Published
2026-10-01
Title
Kubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL Attribute
Slug
kubio
Published
2026-10-01
Title
Kubio AI Page Builder < 2.9.3 - Unauthenticated Stored XSS via Comment Content
Slug
kudos-donations
Published
2021-11-22
Title
Kudos Donations < 3.1.2 - Arbitrary Items Deletion via CSRF
Slug
kudos-donations
Published
2024-11-27
Title
Kudos Donations – Easy donations and payments with Mollie < 3.3.0 - Reflected Cross-Site Scripting via 'add_query_arg'
Slug
kudos-donations
Published
2024-11-27
Title
Kudos Donations – Easy donations and payments with Mollie < 3.3.0 - Reflected Cross-Site Scripting
Slug
kumihimo
Published
2025-01-16
Title
Kumihimo <= 1.0.2 - Reflected Cross-Site Scripting
Slug
kundgenerator
Published
2024-12-11
Title
Kundgenerator < 1.0.7 - Reflected Cross-Site Scripting
Slug
kunze-law
Published
2022-02-17
Title
Kunze Law < 2.1 - Admin+ Stored Cross-Site Scripting
Slug
kunze-law
Published
2026-01-13
Title
Kunze Law <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
kush-micro-news
Published
2025-02-21
Title
Kush Micro News <= 1.6.7 - Unauthenticated Stored Cross-Site Scripting
Slug
kv-send-email-from-admin
Published
2025-01-16
Title
Kv Compose Email From Dashboard <= 1.1 - Reflected Cross-Site Scripting
Slug
kv-tinymce-editor-fonts
Published
2023-09-28
Title
Kv TinyMCE Editor Add Fonts <= 1.1 - Font List Update via CSRF
Slug
kvcore-idx
Published
2024-12-11
Title
kvCORE IDX <= 2.3.35 - Reflected Cross-Site Scripting
Slug
kvoucher
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
kvoucher
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
kwayy-html-sitemap
Published
2022-12-05
Title
Kwayy HTML Sitemap < 4.0 - Admin+ Stored XSS
Slug
kwayy-html-sitemap
Published
2026-07-23
Title
Kwayy HTML Sitemap < 5.1 - Cross-Site Request Forgery