WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
lastfm-recent-album-artwork
Published
2025-08-15
Title
Last.fm Recent Album Artwork <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
lastfm-rotation
Published
2014-09-19
Title
Last.fm Rotation 1.0 - lastfm-proxy.php snode Parameter Remote Path Traversal File Access
Slug
lastform
Published
2021-09-27
Title
Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File Read
Slug
lastudio-element-kit
Published
2023-12-26
Title
LA-Studio Element Kit for Elementor < 1.1.6 - Missing Authorization
Slug
lastudio-element-kit
Published
2024-03-14
Title
LA-Studio Element Kit for Elementor < 1.3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lastudio-element-kit
Published
2024-05-01
Title
LA-Studio Element Kit for Elementor < 1.3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via LaStudioKit Post Author Widget
Slug
lastudio-element-kit
Published
2024-05-22
Title
LA-Studio Element Kit for Elementor < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
lastudio-element-kit
Published
2024-06-06
Title
LA-Studio Element Kit for Elementor < 1.3.7.4 - Missing Authorization
Slug
lastudio-element-kit
Published
2024-07-01
Title
LA-Studio Element Kit for Elementor < 1.3.9 - Authenticated (Contributor+) Local File Inclusion
Slug
lastudio-element-kit
Published
2024-07-02
Title
LA-Studio Element Kit for Elementor < 1.3.9 - Authenticated (Contributor+) Local File Inclusion via 'progress_type'
Slug
lastudio-element-kit
Published
2024-08-09
Title
LA-Studio Element Kit for Elementor < 1.3.9.3 - Contributor+ Stored XSS
Slug
lastudio-element-kit
Published
2024-09-30
Title
LA-Studio Element Kit for Elementor < 1.3.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lastudio-element-kit
Published
2024-11-22
Title
LA-Studio Element Kit for Elementor < 1.4.3 - Authenticated (Contributor+) Local File Inclusion
Slug
lastudio-element-kit
Published
2024-12-03
Title
LA-Studio Element Kit for Elementor < 1.4.5 - Authenticated (Contributor+) Post Disclosure
Slug
lastudio-element-kit
Published
2025-04-04
Title
LA-Studio Element Kit for Elementor < 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lastudio-element-kit
Published
2025-04-17
Title
LA-Studio Element Kit for Elementor < 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table of Contents Widget
Slug
lastudio-element-kit
Published
2025-05-29
Title
LA-Studio Element Kit for Elementor < 1.5.3 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link Parameter
Slug
lastudio-element-kit
Published
2025-05-29
Title
LA-Studio Element Kit for Elementor < 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Google Maps Widgets
Slug
lastudio-element-kit
Published
2025-09-05
Title
LA-Studio Element Kit for Elementor < 1.5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
lastunes
Published
2024-01-19
Title
lasTunes <= 3.6.1 - Settings Update via CSRF
Slug
latepoint
Published
2024-06-13
Title
LatePoint Plugin < 4.9.9.1 - Missing Authorization and Sensitive Information Exposure via IDOR
Slug
latepoint
Published
2024-09-20
Title
LatePoint < 5.0.12 - Unauthenticated Arbitrary User Password Change via SQL Injection
Slug
latepoint
Published
2024-09-24
Title
LatePoint < 5.0.13 - Authentication Bypass
Slug
latepoint
Published
2025-03-27
Title
LatePoint < 5.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
latepoint
Published
2025-05-13
Title
Latepoint < 5.1.93 - Unauthenticated Insecure Direct Object Reference