WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kiwi-social-share
Published
2021-06-04
Title
Social Sharing Plugin - Kiwi 2.1.0 - Unauthenticated Arbitrary WordPress Options Update and Read
Slug
kiwi-social-share
Published
2024-07-08
Title
Social Sharing Plugin – Kiwi < 2.1.8 - Information Disclosure
Slug
kiwi-social-share
Published
2025-09-05
Title
Kiwi <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kiwichat
Published
2025-05-01
Title
KiwiChat NextClient <= 6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
Slug
kjm-admin-notices
Published
2021-10-14
Title
KJM Admin Notices <= 2.0.1 - Admin+ Stored Cross-Site Scripting
Slug
kk-i-like-it
Published
2025-03-28
Title
KK I Like It <= 1.7.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
kk-star-ratings
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
kk-star-ratings
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
kk-star-ratings
Published
2023-11-06
Title
kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition
Slug
kk-star-ratings
Published
2023-10-25
Title
kk Star Ratings < 5.4.6 - Missing Authorization
Slug
kk-star-ratings
Published
2024-12-20
Title
kk Star Ratings – Rate Post & Collect User Feedbacks < 5.4.10.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
kk-youtube-video
Published
2025-06-13
Title
kk Youtube Video <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kkprogressbar
Published
2024-05-06
Title
KKProgressbar2 Free <= 1.1.4.2 - Progress Bar Deletion via CSRF
Slug
kkprogressbar
Published
2024-05-06
Title
KKProgressbar2 Free <= 1.1.4.2 - Stored XSS via CSRF
Slug
kkprogressbar
Published
2024-05-06
Title
KKProgressbar2 Free <= 1.1.4.2 - Admin+ SQL Injection
Slug
klarna-checkout-for-woocommerce
Published
2020-04-08
Title
Klarna Checkout for WooCommerce < 2.0.10 - Authenticated Arbitrary Plugin Deactivation, Activation and Installation
Slug
klarna-checkout-for-woocommerce
Published
2025-03-27
Title
Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
Slug
klarna-order-management-for-woocommerce
Published
2025-09-03
Title
Klarna Order Management for WooCommerce < 1.9.9 - Shop Manager+ Information Disclosure
Slug
klarna-payments-for-woocommerce
Published
2024-03-28
Title
Klarna Payments for WooCommerce < 3.3.0 - Missing Authorization
Slug
klaviyo
Published
2023-03-20
Title
Klaviyo <= 3.0.10 - Admin+ Stored XSS
Slug
klaviyo
Published
2023-03-13
Title
Klaviyo < 3.0.8 - Admin+ Stored XSS
Slug
kn-fix-your
Published
2021-07-20
Title
KN Fix Your Title <= 1.0.1 - Authenticated Stored XSS
Slug
knews
Published
2014-08-01
Title
Knews 1.2.5 - Multilingual Newsletters Cross-Site Request Forgery
Slug
knews
Published
2014-08-01
Title
Knews 1.2.5 - Unspecified XSS
Slug
knews
Published
2014-08-01
Title
Knews 1.1.0 - wysiwyg/fontpicker/index.php ff Parameter XSS