WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
propovoice
Published
2026-08-14
Title
Propovoice: All-in-One Client Management System <= 1.7.8 - Authenticated (ndpv_manager+) Privilege Escalation via 'role' Parameter
Slug
propovoice-pro
Published
2024-08-26
Title
Propovoice Pro <= 1.7.0.3 - Unauthenticated SQL Injection
Slug
proranktracker
Published
2025-03-24
Title
Pro Rank Tracker <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
prosolution-wp-client
Published
2026-04-08
Title
ProSolution WP Client < 2.0.0 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess
Slug
prosolution-wp-client
Published
2026-05-19
Title
ProSolution WP Client < 2.0.1 - Unauthenticated Arbitrary File Upload via 'files'
Slug
prosolution-wp-client
Published
2026-08-06
Title
ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter
Slug
prosolution-wp-client
Published
2026-08-06
Title
ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie
Slug
prosolution-wp-client
Published
2026-08-10
Title
ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validate
Slug
prosolution-wp-client
Published
2026-08-10
Title
ProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls
Slug
prosolution-wp-client
Published
2026-08-15
Title
ProSolution WP Client < 2.0.11 - Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override
Slug
prosolution-wp-client
Published
2026-08-15
Title
ProSolution WP Client < 2.0.9 - Unauthenticated Arbitrary File Deletion via 'newfilename' and 'filename' Parameters
Slug
prosolution-wp-client
Published
2026-08-17
Title
ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters
Slug
prosolution-wp-client
Published
2026-08-17
Title
ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter
Slug
proteccion-datos-rgpd
Published
2026-01-24
Title
Protección de datos – RGPD < 0.69 - Missing Authorization
Slug
protect-admin-account
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
protect-uploads-with-login-page
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
protect-uploads-with-login-page
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
protect-wp-admin
Published
2021-12-23
Title
Protect WP Admin < 3.6.2 - Unauthenticated Plugin Deactivation
Slug
protect-wp-admin
Published
2023-06-12
Title
Protect WP Admin < 4.0 - Unauthenticated Protection Bypass
Slug
protect-wp-admin
Published
2025-12-15
Title
Protect WP Admin < 4.2 - Missing Authorization
Slug
protect-your-content
Published
2024-11-23
Title
Protect Your Content <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
protected-page
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
protected-page
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
protected-posts-logout-button
Published
2023-02-20
Title
Protected Posts Logout Button < 1.4.6 - Admin+ Stored XSS
Slug
protected-posts-logout-button
Published
2023-02-16
Title
Protected Posts Logout Button < 1.4.6 - Missing Authorization