WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
protected-posts-logout-button
Published
2023-02-16
Title
Protected Posts Logout Button < 1.4.5 - Settings Update via CSRF
Slug
protected-wp-login
Published
2025-02-21
Title
Protected wp-login <= 2.1 - Reflected Cross-Site Scripting
Slug
provesource
Published
2025-08-21
Title
ProveSource Social Proof < 4.0.0 - Unauthenticated Sensitive Information Disclosure
Slug
provide-forex-signals
Published
2024-11-08
Title
Provide Forex Signals <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
proxy-vpn-blocker
Published
2026-01-09
Title
Proxy & VPN Blocker < 3.5.4 - Missing Authorization
Slug
proxy-vpn-blocker
Published
2026-07-08
Title
Proxy & VPN Blocker < 3.5.9 - Unauthenticated Stored Cross-Site Scripting
Slug
ps-ads-pro
Published
2025-01-16
Title
Ps Ads Pro <= 1.0.0 - Reflected Cross-Site Scripting
Slug
ps-phpcaptcha
Published
2019-02-16
Title
PS PHPCaptcha < 1.2.0 -Denial of Service
Slug
psw-login-and-registration
Published
2025-05-08
Title
PSW Front-end Login & Registration <= 1.12 - Authentication Bypass
Slug
psw-login-and-registration
Published
2025-05-30
Title
PSW Front-end Login & Registration <= 1.12 - Unauthenticated Account Takeover/Privilege Escalation
Slug
pt-luxa-addons
Published
2025-06-10
Title
PT Luxa Addons <= 1.2.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
pt-luxa-addons
Published
2026-06-10
Title
PT Luxa Addons <= 1.2.2 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
pta-member-directory
Published
2024-12-19
Title
Member Directory and Contact Form < 1.8.0 - Missing Authorization
Slug
pta-volunteer-sign-up-sheets
Published
2025-05-27
Title
Volunteer Sign Up Sheets < 5.5.5 - Authenticated (Admin+) Stored Cross-site Scripting
Slug
ptengine-real-time-web-analytics-and-heatmap
Published
2015-03-25
Title
Ptengine <= 1.0.1 - Reflected Cross-Site Scripting (XSS)
Slug
ptoffice-sign-ups
Published
2024-02-02
Title
PT Sign Ups <= 1.0.4 - Unauthenticated Stored Cross-Site Scripting
Slug
ptypeconverter
Published
2024-01-03
Title
pTypeConverter <= 0.2.8.1 - Authenticated (Editor+) SQL Injection
Slug
pubjet
Published
2026-10-06
Title
Pubjet <= 5.4.8 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
publish-2-pingfm
Published
2026-05-04
Title
Publish 2 Ping.fm <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'wpPingPingKey' Parameter
Slug
publish-approval
Published
2025-09-10
Title
Publish approval <= 1.1 - Cross-Site Request Forgery
Slug
publish-confirm-message
Published
2023-10-03
Title
Publish Confirm Message < 2.0 - Settings Update via CSRF
Slug
publish-post-email-notification
Published
2023-10-02
Title
wordpress publish post email notification < 1.0.2.3 - Admin+ Stored XSS
Slug
publish-post-email-notification
Published
2025-03-27
Title
publish post email notification < 1.0.2.4 - Cross-Site Request Forgery
Slug
publish-to-schedule
Published
2023-02-27
Title
Publish to Schedule < 4.5.5 - Admin+ Stored XSS
Slug
publishpress
Published
2021-09-06
Title
PublishPress Editorial Calendar < 3.5.1 - Reflected Cross-Site Scripting