WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
oneelements-ultimate-addons-for-elementor
Published
2024-09-24
Title
OneElements – Best Elementor Addons <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
onelogin-saml-sso
Published
2016-06-06
Title
OneLogin SAML SSO <= 2.1.5 - Authentication Bypass
Slug
onelogin-saml-sso
Published
2016-06-06
Title
OneLogin SAML SSO < 2.2.0 - Provisioned User Hardcoded Password
Slug
onelogin-saml-sso
Published
2016-10-14
Title
OneLogin SAML SSO <= 2.4.2 - Signature Wrapping
Slug
onepay-payment-gateway-for-woocommerce
Published
2026-01-16
Title
onepay Payment Gateway For WooCommerce < 1.1.3 - Missing Authorization to Unauthenticated Order Status Modification
Slug
onesignal-free-web-push-notifications
Published
2019-07-18
Title
OneSignal Web Push Notifications - Stored XSS
Slug
onesignal-free-web-push-notifications
Published
2025-12-15
Title
OneSignal – Web Push Notifications < 3.6.2 - Missing Authorization to Unauthenticated Plugin Settings Update
Slug
onestore-sites
Published
2025-02-03
Title
OneStore Sites <= 0.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Slug
onestore-sites
Published
2025-02-26
Title
OneStore Sites <= 0.1.1 - Unauthenticated Blind Server-Side Request Forgery
Slug
onet-regenerate-thumbnails
Published
2025-06-27
Title
ONet Regenerate Thumbnails <= 1.5 - Cross-Site Request Forgery
Slug
ongkoskirim-id
Published
2025-09-22
Title
Ongkoskirim.id <= 1.0.6 - Missing Authorization
Slug
onionbuzz-viral-quiz
Published
2025-06-27
Title
OnionBuzz <= 1.0.7 - Cross-Site Request Forgery
Slug
online-accessibility
Published
2019-02-13
Title
Online Accessibility <= 2.0.10 - CSRF and lack of Authorisation in AJAX methods
Slug
online-accessibility
Published
2023-10-13
Title
Accessibility Suite by Online ADA < 4.13 - Subscriber+ SQLi
Slug
online-accessibility
Published
2023-04-19
Title
Accessibility Suite by Online ADA < 4.13 - Subscriber+ SQLi
Slug
online-accessibility
Published
2025-01-31
Title
Accessibility Suite by Ability, Inc < 4.19 - Missing Authorization
Slug
online-accessibility
Published
2025-04-07
Title
Accessibility Suite by Online ADA < 4.19 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
online-accessibility
Published
2025-04-09
Title
Accessibility Suite by Online ADA < 4.19 - Authenticated (Subscriber+) SQL Injection
Slug
online-accessibility
Published
2025-06-05
Title
Accessibility Suite < 4.20 - Missing Authorization
Slug
online-appointment-scheduling-software
Published
2025-01-16
Title
Swift Calendar Online Appointment Scheduling <= 1.3.3 - Reflected Cross-Site Scripting
Slug
online-booking-engine
Published
2025-09-22
Title
eZee Online Hotel Booking Engine <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
online-lesson-booking-system
Published
2019-06-10
Title
Online Lesson Booking <= 0.8.6 - CSRF & XSS
Slug
onlinecontract
Published
2025-03-04
Title
WP Online Contract <= 5.1.4 - Missing Authorization to Unauthenticated Settings Import
Slug
only-tweet-like-share-and-google-1
Published
2023-07-05
Title
Simple Light Weight Social Share <= 2.0 - Admin+ Stored XSS
Slug
onlyoffice
Published
2024-12-05
Title
ONLYOFFICE Docs < 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting