WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
netease-music
Published
2025-08-13
Title
Netease Music <= 3.2.1 - Missing Authorization
Slug
netforum-directory-with-importer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
netforum-directory-with-importer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
netgsm
Published
2024-04-15
Title
Netgsm < 2.9.1 - Reflected Cross-Site Scripting
Slug
netgsm
Published
2024-05-10
Title
Netgsm < 2.9.33 - Missing Authorization
Slug
netgsm
Published
2025-09-26
Title
Netgsm <= 2.9.58 - Missing Authorization
Slug
netinsight-analytics-implementation-plugin
Published
2025-08-14
Title
NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross-Site Request Forgery
Slug
netinsight-analytics-implementation-plugin
Published
2025-08-14
Title
NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross-Site Request Forgery
Slug
netreviews
Published
2023-04-20
Title
Verified Reviews < 2.3.15 - Admin+ Stored XSS
Slug
network-favorites
Published
2025-01-16
Title
Network-Favorites <= 1.1 - Reflected Cross-Site Scripting
Slug
network-posts-extended
Published
2025-05-20
Title
Network Posts Extended <= 7.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_height Parameter
Slug
network-publisher
Published
2014-08-01
Title
Network Publisher <= 5.0.1 - Cross Site Scripting
Slug
network-summary
Published
2024-03-21
Title
Network Summary <= 2.0.11 - Unauthenticated SQL Injection
Slug
neuvoo-jobroll
Published
2015-11-05
Title
neuvoo-jobroll <= 2.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
new-adman
Published
2023-03-03
Title
New Adman <= 1.6.8 - Admin+ Stored XSS
Slug
new-adman
Published
2023-03-03
Title
New Adman <= 1.6.8 - Settings Update via CSRF
Slug
new-album-gallery
Published
2023-07-17
Title
Album Gallery – WordPress Gallery < 1.5.0 - Cross-Site Request Forgery
Slug
new-album-gallery
Published
2024-06-06
Title
Album Gallery – WordPress Gallery < 1.5.8 - Missing Authorization
Slug
new-album-gallery
Published
2025-02-28
Title
Album Gallery – WordPress Gallery < 1.6.4 - Authenticated (Editor+) PHP Object Injection via Gallery Meta
Slug
new-contact-form-widget
Published
2024-05-14
Title
Contact Form Widget < 1.4.0 - Sensitive Information Exposure
Slug
new-contact-form-widget
Published
2024-10-09
Title
Contact Form Widget < 1.4.3 - Cross-Site Request Forgery
Slug
new-contact-form-widget
Published
2025-05-07
Title
Contact Form Widget < 1.4.7 - Cross-Site Request Forgery
Slug
new-contact-form-widget
Published
2025-12-31
Title
Contact Form Widget <= 1.5.1 - Cross-Site Request Forgery
Slug
new-grid-gallery
Published
2021-07-21
Title
Grid Gallery < 1.2.5 - Authenticated Stored Cross Site Scripting (XSS)
Slug
new-grid-gallery
Published
2024-04-29
Title
Grid Gallery < 1.4.4 - Contributor+ PHP Object Injection via shortcode