WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
lu-radioplayer
Published
2024-11-12
Title
LUNA RADIO PLAYER < 6.24.11.07 - Unauthenticated Arbitrary File Read
Slug
lu-radioplayer
Published
2024-11-15
Title
LUNA RADIO PLAYER < 6.24.11.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
lucas-string-replace
Published
2024-09-12
Title
Lucas String Replace <= 2.0.5 - Reflected Cross-Site Scripting
Slug
lucidlms
Published
2025-01-07
Title
LucidLMS <= 1.0.5 - Reflected Cross-Site Scripting
Slug
lucky-draw
Published
2025-12-12
Title
Lucky Draw Contests <= 4.2 - Cross-Site Request Forgery to Plugin Settings Update
Slug
luckywp-scripts-control
Published
2023-08-28
Title
LuckyWP Scripts Control < 1.2.2 - CSRF via multiple AJAX actions
Slug
luckywp-scripts-control
Published
2023-11-14
Title
LuckyWP Scripts Control < 1.2.2 - Missing Authorization
Slug
luckywp-table-of-contents
Published
2024-05-21
Title
LuckyWP Table of Contents < 2.1.6 - Reflected Cross-Site Scripting
Slug
luckywp-table-of-contents
Published
2024-05-21
Title
LuckyWP Table of Contents < 2.1.5 - Admin+ Stored XSS
Slug
luckywp-table-of-contents
Published
2024-05-21
Title
LuckyWP Table of Contents < 2.1.5 - Contributor+ Stored XSS
Slug
luckywp-table-of-contents
Published
2024-05-24
Title
LuckyWP Table of Contents < 2.1.6 - Admin+ Stored XSS
Slug
luckywp-table-of-contents
Published
2024-11-21
Title
LuckyWP Table of Contents < 2.1.7 - Admin+ Stored XSS
Slug
luckywp-table-of-contents
Published
2025-04-02
Title
LuckyWP Table of Contents < 2.1.11 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
lunar-sell-photos-online
Published
2025-03-11
Title
Lunar <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
lupsonline-link-netwerk
Published
2025-05-16
Title
SEO Flow by LupsOnline <= 2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
luzuk-slider
Published
2024-11-08
Title
Luzuk Slider <= 0.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
luzuk-team
Published
2024-11-08
Title
Luzuk Team <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
luzuk-testimonials
Published
2024-11-08
Title
Luzuk Testimonials <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lw-all-in-one
Published
2020-10-12
Title
LocalWeb All In One plugin < 1.6.5 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
lws-affiliation
Published
2024-08-26
Title
LWS Affiliation < 2.3.5 - Missing Authorization
Slug
lws-affiliation
Published
2025-09-22
Title
LWS Affiliation <= 2.3.6 - Cross-Site Request Forgery
Slug
lws-cleaner
Published
2023-07-11
Title
LWS Cleaner < 2.3.1 - Cross-Site Request Forgery
Slug
lws-cleaner
Published
2025-09-11
Title
LWS Cleaner < 2.4.2 - Admin+ Arbitrary File Deletion
Slug
lws-hide-login
Published
2023-05-23
Title
LWS Hide Login < 2.1.7 - Plugin Settings Page Creation via CSRF
Slug
lws-hide-login
Published
2023-11-16
Title
LWS Hide Login < 2.1.9 - Protection Mechanism Bypass