WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
learts-addons
Published
2025-07-08
Title
Learts Addons < 1.7.5 - Unauthenticated SQL Injection
Slug
ledenbeheer-external-connection
Published
2024-12-19
Title
Ledenbeheer < 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
leenkme
Published
2016-04-17
Title
leenk.me < 2.6.0 - XSS & CSRF
Slug
leenkme
Published
2024-10-21
Title
leenk.me <= 2.16.0 - Reflected Cross-Site Scripting
Slug
left-right-image-slideshow-gallery
Published
2023-10-30
Title
Left right image slideshow gallery < 12.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
legal-pages
Published
2023-11-16
Title
Legal Pages < 1.3.9 - Cross-Site Request Forgery via moveToTrash and fetch_and_insert_template_data
Slug
legal-pages
Published
2023-09-18
Title
Legal Pages < 1.3.8 - Missing Authorization on 'deleteLegalTemplate'
Slug
legal-pages
Published
2023-11-14
Title
Legal Pages < 1.3.9 - Missing Authorization
Slug
legal-pages
Published
2024-04-12
Title
Legal Pages < 1.4.3 - Cross-Site Request Forgery
Slug
legal-pages
Published
2025-05-19
Title
Legal Pages < 1.4.6 - Missing Authorization
Slug
legal-pages
Published
2025-11-21
Title
Legal Pages < 1.4.7 - Missing Authorization
Slug
legal-plus
Published
2025-01-16
Title
Legal + <= 1.0 - Reflected Cross-Site Scripting
Slug
legalweb-cloud
Published
2024-11-27
Title
LegalWeb Cloud < 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
legoeso-pdf-manager
Published
2025-02-19
Title
Legoeso PDF Manager <= 1.2.2 - Authenticated (Author+) SQL Injection via checkedVals Parameter
Slug
legull
Published
2025-01-17
Title
Legull <= 1.2.2 - Reflected XSS
Slug
leira-cron-jobs
Published
2024-09-12
Title
Cron Jobs < 1.2.10 - Reflected Cross-Site Scripting
Slug
leira-roles
Published
2024-09-12
Title
Roles & Capabilities < 1.1.10 - Reflected Cross-Site Scripting
Slug
lemonade-sna-pinterest-edition
Published
2024-12-17
Title
Lemonade Social Networks Autoposter Pinterest <= 2.0 - Reflected Cross-Site Scripting
Slug
len-slider
Published
2025-01-16
Title
Len Slider <= 2.0.11 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
lenix-elementor-leads-addon
Published
2025-02-19
Title
Lenix Elementor Leads addon < 1.8.3 - Unauthenticated Stored Cross-Site Scripting via URL Form Field
Slug
lenix-scss-compiler
Published
2025-09-26
Title
Lenix scss compiler <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
lenix-scss-compiler
Published
2025-09-26
Title
Lenix scss compiler <= 1.2 - Cross-Site Request Forgery
Slug
lenxel-core
Published
2024-11-08
Title
Lenxel Core for Lenxel(LNX) LMS < 1.2.5 - Author+ Stored XSS via SVG File Upload
Slug
lenxel-core
Published
2024-11-29
Title
Lenxel Core <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lenxel-core
Published
2024-11-29
Title
Lenxel Core <= 1.1 - Authenticated (Contributor+) Local File Inclusion