WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
nd-donations
Published
2019-08-03
Title
ND Donations < 1.4 - Unauthenticated Options Change
Slug
nd-donations
Published
2022-03-29
Title
Donations <= 1.8 - Unauthenticated SQLi
Slug
nd-donations
Published
2022-05-13
Title
Donations <= 1.8 - Contributor+ Stored Cross-Site Scripting
Slug
nd-elements
Published
2024-05-31
Title
Elements For Elementor < 2.2 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributes
Slug
nd-learning
Published
2019-08-06
Title
ND Learning <= 4.7 - Unauthenticated Options Change
Slug
nd-learning
Published
2021-12-29
Title
Learning Courses < 5.0 - Admin+ Stored Cross-Site Scripting
Slug
nd-projects
Published
2022-02-01
Title
Cost Calculator <= 1.8 - Authenticated Local File Inclusion
Slug
nd-projects
Published
2022-02-01
Title
Cost Calculator < 1.6 - Contributor+ Stored Cross-Site Scripting
Slug
nd-projects
Published
2023-02-13
Title
Cost Calculator <= 1.8 - Contributor+ Stored XSS
Slug
nd-projects
Published
2023-03-02
Title
Cost Calculator <= 1.8 - Contributor+ Stored XSS
Slug
nd-restaurant-reservations
Published
2019-08-09
Title
ND Restaurant Reservations < 1.5 - Unauthenticated Options Change
Slug
nd-restaurant-reservations
Published
2023-12-27
Title
Restaurant Reservations < 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nd-restaurant-reservations
Published
2024-03-06
Title
Restaurant Reservations < 2.0 - Directory Traversal to Authenticated (Contributor+) Local File Inclusion
Slug
nd-restaurant-reservations
Published
2024-06-21
Title
Restaurant Reservations <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nd-shortcodes
Published
2019-07-31
Title
ND Shortcodes For Visual Composer < 6.0 - Unauthenticated WP Options Update
Slug
nd-shortcodes
Published
2023-06-12
Title
ND Shortcodes < 7.0 - Contributor+ Stored XSS via Shortcodes
Slug
nd-shortcodes
Published
2023-06-12
Title
ND Shortcodes < 7.0 - Subscriber+ LFI
Slug
nd-shortcodes
Published
2024-05-24
Title
ND Shortcodes < 7.6 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
nd-shortcodes
Published
2026-10-22
Title
ND Shortcodes <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nd-travel
Published
2019-08-03
Title
Travel Management < 1.7 - Unauthenticated Options Change
Slug
nd-travel
Published
2022-06-14
Title
Travel Management <= 2.0 - Contributor+ Stored Cross-Site Scripting
Slug
near-login
Published
2026-05-26
Title
Login with NEAR <= 0.3.3 - Authentication Bypass via 'account' Parameter
Slug
nearby-locations
Published
2025-04-07
Title
Nearby Locations <= 1.1.1 - Authenticated (Administrator+) SQL Injection
Slug
nearby-now-reviews
Published
2026-01-08
Title
Nearby Now Reviews <= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
nelio-ab-testing
Published
2016-05-11
Title
Nelio AB Testing < 4.5.0 - Path Traversal