WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
navegg
Published
2025-04-24
Title
Navegg Analytics <= 3.3.3 - Cross-Site Request Forgery
Slug
naver-analytics
Published
2025-01-03
Title
NAVER Analytics <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
naver-blog-api
Published
2024-11-01
Title
Naver Blog <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
naver-map
Published
2023-01-11
Title
Naver Map <= 1.1.0 - Contributor+ Stored XSS
Slug
navigation-du-lapin-blanc
Published
2025-01-14
Title
Navigation Du Lapin Blanc <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
navigation-menu-as-dropdown-widget
Published
2024-04-16
Title
Navigation menu as Dropdown Widget < 1.3.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
navigation-tree-elementor
Published
2025-03-25
Title
Navigation Tree Elementor <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Slug
navis-documentcloud
Published
2015-08-26
Title
Navis DocumentCloud 0.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
navz-photo-gallery
Published
2021-12-20
Title
ACF Photo Gallery Field < 1.7.5 - Reflected Cross-Site Scripting
Slug
navz-photo-gallery
Published
2023-07-26
Title
ACF Photo Gallery Field < 2.0 - Subscriber+ UserMeta Update
Slug
navz-photo-gallery
Published
2024-01-30
Title
ACF Photo Gallery Field < 2.7 - Missing Authorization
Slug
navz-photo-gallery
Published
2026-02-18
Title
ACF Photo Gallery Field < 3.1 - Missing Authorization to Authenticated (Subscriber+) Attachment Metadata Modification
Slug
nazy-load
Published
2025-10-31
Title
Flying Images: Optimize and Lazy Load Images for Faster Page Speed < 2.4.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
nblocks
Published
2024-11-18
Title
nBlocks <= 1.0.2 - Authenticated (Contributor+) Local File Inclusion
Slug
nc-wishlist-for-woocommerce
Published
2025-01-07
Title
NC Wishlist for Woocommerce <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Slug
nd-booking
Published
2019-08-05
Title
ND Booking < 2.5 - Unauthenticated Options Change
Slug
nd-booking
Published
2022-05-26
Title
Hotel Booking < 3.3 - Contributor+ Stored XSS
Slug
nd-booking
Published
2025-04-17
Title
Hotel Booking < 3.7 - Unauthenticated Local File Inclusion
Slug
nd-booking
Published
2025-05-07
Title
Hotel Booking < 3.7 - Authenticated (Contributor+) Local File Inclusion
Slug
nd-booking
Published
2025-06-27
Title
Hotel Booking < 3.8 - Authenticated (Contributor+) Local File Inclusion
Slug
nd-booking
Published
2025-12-31
Title
Hotel Booking <= 3.8 - Missing Authorization
Slug
nd-booking
Published
2026-10-05
Title
Hotel Booking <= 3.8 - Unauthenticated Stored Cross-Site Scripting
Slug
nd-booking
Published
2026-10-28
Title
Hotel Booking <= 3.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
nd-booking
Published
2026-10-09
Title
Hotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDOR
Slug
nd-booking
Published
2026-10-09
Title
Hotel Booking <= 3.8 - Booking Order Creation, Deletion, and Modification via CSRF