WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
lifterlms
Published
2023-11-05
Title
LifterLMS < 7.5.0 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion
Slug
lifterlms
Published
2024-02-27
Title
LifterLMS – WordPress LMS Plugin for eLearning < 7.5.2 - Missing Authorization via process_review
Slug
lifterlms
Published
2024-04-08
Title
LifterLMS < 7.5.1 - Cross-Site Request Forgery
Slug
lifterlms
Published
2024-06-04
Title
LifterLMS – WordPress LMS Plugin for eLearning < 7.6.3 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
lifterlms
Published
2024-09-05
Title
LifterLMS < 7.7.6 - Authenticated (Admin+) SQL Injection
Slug
lifterlms
Published
2024-12-17
Title
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes < 7.8.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Slug
lifterlms
Published
2024-12-08
Title
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes < 8.0.1 - Reflected XSS
Slug
lifterlms
Published
2025-03-18
Title
LifterLMS < 8.0.2 - Missing Authorization to Unauthenticated Post Trashing
Slug
lifterlms
Published
2025-07-01
Title
LifterLMS < 8.0.7 - Unauthenticated SQL Injection
Slug
lifterlms
Published
2025-11-12
Title
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation
Slug
lifterlms-gateway-paypal
Published
2022-04-04
Title
LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting
Slug
light-messages
Published
2021-07-19
Title
Light Messages <= 1.0 - CSRF to Stored XSS
Slug
light-poll
Published
2024-07-15
Title
Light Poll <= 1.0.0 - Poll Answers Deletion via CSRF
Slug
light-poll
Published
2024-07-11
Title
Light Poll <= 1.0.0 - Polls Deletion via CSRF
Slug
lightbox
Published
2016-11-13
Title
Lightbox <= 1.6.7 - Cross-Site Scripting (XSS)
Slug
lightbox-block
Published
2025-07-16
Title
LightBox Block < 1.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lightbox-gallery
Published
2023-01-18
Title
Lightbox Gallery < 0.9.5 - Contributor+ Stored XSS via Shortcode
Slug
lightbox-photo-gallery
Published
2014-12-14
Title
Lightbox Photo Gallery 1.0 - CSRF/XSS
Slug
lightbox-plus
Published
2016-04-05
Title
Lightbox Plus < 2.8 - CSRF to XSS
Slug
lightbox-popup
Published
2023-01-23
Title
Image and Video Lightbox, Image PopUp < 2.1.6 - Admin+ Stored XSS
Slug
lightgallerywp
Published
2025-11-19
Title
Multiple Plugins and Themes - Contributor+ DOM-Based Stored XSS via lightGallery Library
Slug
lightview-plus
Published
2025-03-24
Title
Lightview Plus <= 3.1.3 - Reflected Cross-Site Scripting
Slug
lightweight-accordion
Published
2023-01-23
Title
Lightweight Accordion < 1.5.15 - Contributor+ Stored XSS
Slug
lightweight-accordion
Published
2024-03-22
Title
Lightweight Accordion < 1.5.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
lightweight-accordion
Published
2025-12-14
Title
Lightweight Accordion < 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting