WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
learnpress-import-export
Published
2023-04-17
Title
LearnPress Export Import < 4.0.3 - Reflected XSS
Slug
learnpress-import-export
Published
2024-04-05
Title
LearnPress Export Import < 4.0.4 - Authenticated (Administrator+) SQL Injection
Slug
learnpress-import-export
Published
2024-04-16
Title
LearnPress Export Import < 4.0.4 - Reflected Cross-Site Scripting
Slug
learnpress-import-export
Published
2024-11-14
Title
LearnPress Export Import – WordPress extension for LearnPress < 4.0.5 - Reflected Cross-Site Scripting
Slug
learnpress-import-export
Published
2025-07-21
Title
LearnPress Export Import < 4.1.3 - Unauthenticated Local File Inclusion
Slug
learnpress-import-export
Published
2025-07-22
Title
LearnPress Export Import < 4.1.0 - Reflected Cross-Site Scripting
Slug
learnpress-import-export
Published
2026-02-11
Title
LearnPress Export Import < 4.1.1 - Missing Authentication to Unauthenticated Migrated Course Deletion
Slug
learnpress-sepay-payment
Published
2026-03-16
Title
LearnPress – Sepay Payment < 4.0.1 - Missing Authorization
Slug
leartes-try-exchange-rates
Published
2025-04-01
Title
Leartes TRY Exchange Rates <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
learts-addons
Published
2025-07-08
Title
Learts Addons < 1.7.5 - Unauthenticated SQL Injection
Slug
leco-client-portal
Published
2026-04-16
Title
Client Portal (Pro) < 5.6.3 - Authenticated (CP Client+) Arbitrary File Download
Slug
ledenbeheer-external-connection
Published
2024-12-19
Title
Ledenbeheer < 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
leenkme
Published
2016-04-17
Title
leenk.me < 2.6.0 - XSS & CSRF
Slug
leenkme
Published
2024-10-21
Title
leenk.me <= 2.16.0 - Reflected Cross-Site Scripting
Slug
left-right-image-slideshow-gallery
Published
2023-10-30
Title
Left right image slideshow gallery < 12.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
legacy-admin
Published
2026-03-10
Title
Legacy Admin <= 9.5 - Reflected Cross-Site Scripting
Slug
legal-pages
Published
2023-11-16
Title
Legal Pages < 1.3.9 - Cross-Site Request Forgery via moveToTrash and fetch_and_insert_template_data
Slug
legal-pages
Published
2023-09-18
Title
Legal Pages < 1.3.8 - Missing Authorization on 'deleteLegalTemplate'
Slug
legal-pages
Published
2023-11-14
Title
Legal Pages < 1.3.9 - Missing Authorization
Slug
legal-pages
Published
2024-04-12
Title
Legal Pages < 1.4.3 - Cross-Site Request Forgery
Slug
legal-pages
Published
2025-05-19
Title
Legal Pages < 1.4.6 - Missing Authorization
Slug
legal-pages
Published
2025-11-21
Title
Legal Pages < 1.4.7 - Missing Authorization
Slug
legal-plus
Published
2025-01-16
Title
Legal + <= 1.0 - Reflected Cross-Site Scripting
Slug
legalweb-cloud
Published
2024-11-27
Title
LegalWeb Cloud < 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
legoeso-pdf-manager
Published
2025-02-19
Title
Legoeso PDF Manager <= 1.2.2 - Authenticated (Author+) SQL Injection via checkedVals Parameter