WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kitestudio-core
Published
2022-06-15
Title
Core Plugin for Kitestudio Themes < 2.3.1 - Reflected Cross-Site-Scripting
Slug
kivicare-clinic-management-system
Published
2022-05-23
Title
KiviCare < 2.3.9 - Unauthenticated SQLi
Slug
kivicare-clinic-management-system
Published
2023-06-05
Title
KiviCare Management System < 3.2.1 - Reflected Cross-Site Scripting
Slug
kivicare-clinic-management-system
Published
2023-06-05
Title
KiviCare Management System < 3.2.1 - Multiple CSRF
Slug
kivicare-clinic-management-system
Published
2023-06-05
Title
KiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX Calls
Slug
kivicare-clinic-management-system
Published
2023-06-05
Title
KiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information Disclosure
Slug
kivicare-clinic-management-system
Published
2024-06-03
Title
KiviCare < 3.6.7 - Patient+ Insecure Direct Object Reference
Slug
kivicare-clinic-management-system
Published
2024-12-05
Title
KiviCare – Clinic & Patient Management System (EHR) < 3.6.5 - Unauthenticated SQL Injection
Slug
kivicare-clinic-management-system
Published
2024-12-05
Title
KiviCare – Clinic & Patient Management System (EHR) < 3.6.5 - Authenticated (Doctor/Receptionist+) SQL Injection
Slug
kivicare-clinic-management-system
Published
2024-12-05
Title
KiviCare – Clinic & Patient Management System (EHR) < 3.6.5 - Authenticated (Subscriber+) SQL Injection
Slug
kivicare-clinic-management-system
Published
2025-02-27
Title
KiviCare – Clinic & Patient Management System (EHR) < 3.6.8 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter
Slug
kivicare-clinic-management-system
Published
2025-11-27
Title
KiviCare < 3.6.14 - Authenticated (Patient+) SQL Injection
Slug
kiwi-logo-carousel
Published
2015-08-13
Title
Kiwi Logo Carousel <= 1.7.1 - Authenticated Cross-Site Scripting (XSS)
Slug
kiwi-social-share
Published
2018-11-12
Title
Social Sharing Plugin - Kiwi < 2.0.11 - Arbitrary WordPress Options Update
Slug
kiwi-social-share
Published
2021-06-04
Title
Social Sharing Plugin - Kiwi 2.1.0 - Unauthenticated Arbitrary WordPress Options Update and Read
Slug
kiwi-social-share
Published
2024-07-08
Title
Social Sharing Plugin – Kiwi < 2.1.8 - Information Disclosure
Slug
kiwi-social-share
Published
2025-09-05
Title
Kiwi <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kiwichat
Published
2025-05-01
Title
KiwiChat NextClient <= 6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
Slug
kjm-admin-notices
Published
2021-10-14
Title
KJM Admin Notices <= 2.0.1 - Admin+ Stored Cross-Site Scripting
Slug
kk-i-like-it
Published
2025-03-28
Title
KK I Like It <= 1.7.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
kk-star-ratings
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
kk-star-ratings
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
kk-star-ratings
Published
2023-11-06
Title
kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition
Slug
kk-star-ratings
Published
2023-10-25
Title
kk Star Ratings < 5.4.6 - Missing Authorization
Slug
kk-star-ratings
Published
2024-12-20
Title
kk Star Ratings – Rate Post & Collect User Feedbacks < 5.4.10.2 - Unauthenticated Arbitrary Shortcode Execution