WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
otter-blocks
Published
2024-04-10
Title
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE < 2.6.9 - Contributor+ Stored Cross-Site Scripting via Block Attributes
Slug
otter-blocks
Published
2024-04-10
Title
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE < 2.6.9 - Author+ Stored XSS via SVG Upload
Slug
otter-blocks
Published
2024-04-16
Title
Otter Blocks < 2.6.10 - Contributor+ Stored XSS via titleTag
Slug
otter-blocks
Published
2024-10-31
Title
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE < 3.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
otter-blocks
Published
2024-11-01
Title
Otter - Gutenberg Block < 3.0.4 - Missing Authorization
Slug
otter-blocks
Published
2024-11-26
Title
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE < 3.0.7 - Unauthetnicated Path Traversal to Arbitrary Image View
Slug
otter-blocks
Published
2025-08-27
Title
Otter - Gutenberg Block < 3.1.1 - Unauthenticated Sensitive Information Exposure
Slug
otter-pro
Published
2024-03-06
Title
Otter Blocks PRO < 2.6.4 - Unauthenticated Stored Cross-Site Scripting via SVG Upload
Slug
otter-pro
Published
2024-03-06
Title
Otter Blocks PRO < 2.6.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSS
Slug
otter-pro
Published
2024-06-06
Title
Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE < 2.6.12 - Authenticated (Subscriber+) Information Exposure
Slug
otw-portfolio-manager
Published
2025-08-21
Title
Portfolio Manager Pro 3.8 - Unauthenticated PHP Object Injection
Slug
otw-portfolio-manager
Published
2025-08-21
Title
Portfolio Manager Pro 3.8 - Unauthenticated Arbitrary File Upload
Slug
our-team-enhanced
Published
2015-01-11
Title
Our Team Showcase 1.2 - CSRF & XSS
Slug
our-team-members
Published
2025-03-27
Title
Our Team Members < 2.3 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Slug
out-of-stock-badge
Published
2024-11-28
Title
Out Of Stock Badge <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-site Scripting
Slug
out-of-stock-display-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
out-of-the-box
Published
2021-12-13
Title
Out of the Box < 1.20.3 - Reflected Cross-Site Scripting
Slug
outbound-link-manager
Published
2023-09-05
Title
Outbound Link Manager <= 1.2 - Settings Update via CSRF
Slug
outdoor
Published
2025-10-14
Title
Outdoor <= 1.3.2 - Unauthenticated SQL Injection
Slug
outdooractive-embed
Published
2024-12-19
Title
Outdooractive Embed < 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ova-advent
Published
2025-10-14
Title
Ova Advent < 1.1.8 - Contributor+ Stored XSS
Slug
ova-brw
Published
2025-06-05
Title
BRW < 1.8.7 - Authenticated (Contributor+) Local File Inclusion
Slug
ova-brw
Published
2025-06-05
Title
BRW < 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ova-brw
Published
2025-06-23
Title
BRW < 1.8.8 - Unauthenticated Local File Inclusion
Slug
ova-events
Published
2025-08-20
Title
Ovatheme Events < 1.2.9 - Unauthenticated Local File Inclusion