WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
likebtn-like-button
Published
2022-05-23
Title
Like Button Rating < 2.6.45 - Arbitrary e-mail Sending
Slug
likebtn-like-button
Published
2024-08-29
Title
Like Button Rating < 2.6.54 - Cross-Site Request Forgery
Slug
likecoin
Published
2025-05-02
Title
Web3Press < 3.3.0 - Authenticated (Contributor+) Arbitrary File Read
Slug
likert-survey-master
Published
2025-09-20
Title
Likert Survey Master <= 0.8.0.1 - Reflected Cross-Site Scripting
Slug
lim4wp
Published
2014-08-01
Title
Lim4wp 1.1.1 - Arbitrary File Upload
Slug
limb-gallery
Published
2019-06-26
Title
Limb Gallery < 1.4.0 - Reflected Cross-Site Scripting
Slug
limb-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
limb-gallery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
limb-gallery
Published
2024-10-14
Title
WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
limb-gallery
Published
2024-10-14
Title
WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Download
Slug
lime-developer-login
Published
2025-01-16
Title
Lime Developer Login <= 1.4.0 - Reflected Cross-Site Scripting
Slug
limit-attempts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
limit-attempts
Published
2015-10-09
Title
Limit Attempts < 1.1.1 - SQL Injection
Slug
limit-attempts
Published
2024-03-28
Title
Limit Attempts by BestWebSoft < 1.3.0 - Reflected Cross-Site Scripting
Slug
limit-bio
Published
2025-02-20
Title
Limit Bio <= 1.0 - Stored XSS via CSRF
Slug
limit-bio
Published
2025-02-20
Title
Limit Bio <= 1.0 - Reflected XSS
Slug
limit-login-attempts
Published
2012-06-01
Title
Limit Login Attempts < 1.7.1 - Auth Cookies Brute Force Bypass
Slug
limit-login-attempts
Published
2023-04-06
Title
Limit Login Attempts < 1.7.2 - Unauthenticated Stored XSS
Slug
limit-login-attempts
Published
2023-04-10
Title
Limit Login Attempts < 1.7.2 - Subscriber+ Stored XSS
Slug
limit-login-attempts-plus
Published
2024-09-18
Title
Limit Login Attempts Plus <= 1.1.0 - IP Address Spoofing to Protection Mechanism Bypass
Slug
limit-login-attempts-reloaded
Published
2020-12-14
Title
Limit Login Attempts Reloaded < 2.16.0 - Authenticated Reflected Cross-Site Scripting
Slug
limit-login-attempts-reloaded
Published
2020-12-14
Title
Limit Login Attempts Reloaded < 2.17.4 - Login Rate Limiting Bypass
Slug
limit-login-attempts-reloaded
Published
2023-11-06
Title
Limit Login Attempts Reloaded < 2.25.26 - Admin+ Missing Authorization to Toggle Plugin Auto-Update
Slug
limit-login-attempts-reloaded
Published
2023-12-20
Title
Limit Login Attempts Reloaded < 2.25.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
limit-max-ips-per-user
Published
2025-04-01
Title
Limit Max IPs Per User <= 1.5 - Reflected Cross-Site Scripting