WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ldap-login-for-intranet-sites
Published
2023-04-19
Title
Active Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data Disclosure
Slug
ldap-login-for-intranet-sites
Published
2023-05-12
Title
Active Directory Integration < 4.1.5 - SQL Injection via CSRF
Slug
ldap-login-for-intranet-sites
Published
2023-06-28
Title
Active Directory Integration / LDAP Integration < 4.1.6 - Sensitive Information Disclosure
Slug
ldap-login-for-intranet-sites
Published
2023-09-25
Title
Active Directory Integration / LDAP Integration < 4.2 - Admin LDAP Passback
Slug
ldap-login-for-intranet-sites
Published
2023-09-25
Title
Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure
Slug
ldap-login-password-and-role-manager
Published
2025-01-07
Title
ldap_login_password_and_role_manager <= 1.0.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ldap-wp-login-integration-with-active-directory
Published
2022-09-05
Title
Ldap WP Login / Active Directory Integration < 3.0.2 - Reflected Cross-Site Scripting
Slug
ldap-wp-login-integration-with-active-directory
Published
2022-09-05
Title
Ldap WP Login / Active Directory Integration < 3.0.2 - Unauthenticated Settings Update to Auth Bypass
Slug
ldd-directory-lite
Published
2024-12-11
Title
LDD Directory Lite <= 3.3 - Reflected Cross-Site Scripting
Slug
ldd-directory-lite
Published
2025-01-06
Title
LDD Directory Lite <= 3.3 - Reflected Cross-Site Scripting via remove_query_arg Parameter
Slug
lead-capturing-call-to-actions-by-vcita
Published
2023-06-02
Title
Contact Form and Calls To Action by vcita < 2.7.1 - Contributor+ Stored Cross-Site Scripting
Slug
lead-capturing-call-to-actions-by-vcita
Published
2023-06-02
Title
Contact Form and Calls To Action by vcita <= 2.7.1 - Settings Update Via CSRF
Slug
lead-capturing-call-to-actions-by-vcita
Published
2025-01-30
Title
Contact Form and Calls To Action by vcita <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lead-capturing-call-to-actions-by-vcita
Published
2025-01-30
Title
Contact Form and Calls To Action by vcita <= 2.7.1 - Missing Authorization to Authenticated (Subscriber+) Contact/Widget Toggle
Slug
lead-form-builder
Published
2022-01-05
Title
Contact Form & Lead Form Elementor Builder < 1.7.0 - Multiple Admin+ Stored Cross-Site Scripting
Slug
lead-form-builder
Published
2021-11-29
Title
Contact Form & Lead Form Elementor Builder < 1.6.4 - Unauthenticated Stored Cross-Site Scripting
Slug
lead-form-builder
Published
2022-02-01
Title
Contact Form & Lead Form Elementor Builder Plugin < 1.7.4 - Multiple Subscriber+ Settings Update
Slug
lead-form-builder
Published
2021-12-22
Title
Contact Form & Lead Form Elementor Builder < 1.6.8 - Subscriber+ Arbitrary Lead Deletion
Slug
lead-form-builder
Published
2024-04-11
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.0 - Missing Authorization
Slug
lead-form-builder
Published
2024-04-11
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.0 - Cross-Site Request Forgery
Slug
lead-form-builder
Published
2024-04-12
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.8 - Admin+ Stored XSS
Slug
lead-form-builder
Published
2024-05-21
Title
Responsive Contact Form Builder & Lead Generation Plugin < 1.9.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
lead-form-builder
Published
2024-10-23
Title
Lead Form Builder < 1.9.8 - Admin+ Stored XSS
Slug
lead-form-builder
Published
2026-01-20
Title
Contact Form & Lead Form Elementor Builder < 2.0.2 - Authenticated (Subscriber+) Information Exposure
Slug
leadbi
Published
2025-07-18
Title
LeadBI Plugin for WordPress <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting