WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
lbg_zoominoutslider
Published
2014-08-01
Title
LBG Zoominoutslider - settings_form.php Multiple Parameter Stored XSS
Slug
lbg_zoominoutslider
Published
2014-08-01
Title
LBG Zoominoutslider - add_playlist_record.php Multiple Parameter Stored XSS
Slug
lbg_zoominoutslider
Published
2014-08-01
Title
LBG Zoominoutslider - add_banner.php Unspecified XSS
Slug
lbg_zoominoutslider
Published
2014-08-01
Title
LBG Zoominoutslider - Multiple Script Direct Request Path Disclosure
Slug
lbg_zoominoutslider
Published
2025-09-28
Title
LBG Zoominoutslider <= 5.4.5 - Authenticated (Contributor+) SQL Injection
Slug
lbstopattack
Published
2022-09-29
Title
LBStopAttack < 1.1.3 - Arbitrary Settings Update via CSRF
Slug
ldap-ad-staff-employee-directory-search
Published
2023-09-08
Title
Staff / Employee Business Directory for Active Directory < 1.2.3 - Improper escaping of LDAP entries
Slug
ldap-ad-staff-employee-directory-search
Published
2023-09-25
Title
Staff / Employee Business Directory for Active Directory < 1.3 - Admin LDAP Credentials Retrieval
Slug
ldap-login-for-intranet-sites
Published
2021-10-18
Title
Active Directory Integration / LDAP Integration < 3.6.95 - Reflected Cross-Site Scripting
Slug
ldap-login-for-intranet-sites
Published
2023-04-19
Title
Active Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data Disclosure
Slug
ldap-login-for-intranet-sites
Published
2023-05-12
Title
Active Directory Integration < 4.1.5 - SQL Injection via CSRF
Slug
ldap-login-for-intranet-sites
Published
2023-06-28
Title
Active Directory Integration / LDAP Integration < 4.1.6 - Sensitive Information Disclosure
Slug
ldap-login-for-intranet-sites
Published
2023-09-25
Title
Active Directory Integration / LDAP Integration < 4.2 - Admin LDAP Passback
Slug
ldap-login-for-intranet-sites
Published
2023-09-25
Title
Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure
Slug
ldap-login-password-and-role-manager
Published
2025-01-07
Title
ldap_login_password_and_role_manager <= 1.0.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ldap-wp-login-integration-with-active-directory
Published
2022-09-05
Title
Ldap WP Login / Active Directory Integration < 3.0.2 - Reflected Cross-Site Scripting
Slug
ldap-wp-login-integration-with-active-directory
Published
2022-09-05
Title
Ldap WP Login / Active Directory Integration < 3.0.2 - Unauthenticated Settings Update to Auth Bypass
Slug
ldd-directory-lite
Published
2024-12-11
Title
LDD Directory Lite <= 3.3 - Reflected Cross-Site Scripting
Slug
ldd-directory-lite
Published
2025-01-06
Title
LDD Directory Lite <= 3.3 - Reflected Cross-Site Scripting via remove_query_arg Parameter
Slug
lead-capturing-call-to-actions-by-vcita
Published
2023-06-02
Title
Contact Form and Calls To Action by vcita < 2.7.1 - Contributor+ Stored Cross-Site Scripting
Slug
lead-capturing-call-to-actions-by-vcita
Published
2023-06-02
Title
Contact Form and Calls To Action by vcita <= 2.7.1 - Settings Update Via CSRF
Slug
lead-capturing-call-to-actions-by-vcita
Published
2025-01-30
Title
Contact Form and Calls To Action by vcita <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lead-capturing-call-to-actions-by-vcita
Published
2025-01-30
Title
Contact Form and Calls To Action by vcita <= 2.7.1 - Missing Authorization to Authenticated (Subscriber+) Contact/Widget Toggle
Slug
lead-form-builder
Published
2022-01-05
Title
Contact Form & Lead Form Elementor Builder < 1.7.0 - Multiple Admin+ Stored Cross-Site Scripting
Slug
lead-form-builder
Published
2021-11-29
Title
Contact Form & Lead Form Elementor Builder < 1.6.4 - Unauthenticated Stored Cross-Site Scripting