WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
patreon-connect
Published
2021-03-26
Title
Patreon WordPress < 1.7.2 - Reflected XSS on Login Form
Slug
patreon-connect
Published
2021-03-26
Title
Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX action
Slug
patreon-connect
Published
2022-02-21
Title
Patreon WordPress < 1.8.2 - Admin+ Stored Cross-Site Scripting
Slug
patreon-connect
Published
2023-11-07
Title
Patreon WordPress < 1.8.8 - Cross-Site Request Forgery
Slug
patreon-connect
Published
2024-06-28
Title
Patreon WordPress < 1.9.1 - Protection Mechanism Bypass
Slug
patreon-connect
Published
2025-01-24
Title
Patreon WordPress < 1.9.2 - Missing Authorization
Slug
patron-button-and-widgets-by-codebard
Published
2023-07-24
Title
CodeBard's Patron Button and Widgets for Patreon < 2.1.9 - Reflected XSS
Slug
patron-button-and-widgets-by-codebard
Published
2023-11-07
Title
CodeBard's Patron Button and Widgets for Patreon < 2.2.0 - Reflected XSS
Slug
patron-button-and-widgets-by-codebard
Published
2023-11-14
Title
CodeBard's Patron Button and Widgets for Patreon < 2.2.0 - Cross-Site Request Forgery
Slug
patron-button-and-widgets-by-codebard
Published
2024-04-29
Title
CodeBard's Patron Button and Widgets for Patreon <= 2.2.0 - Reflected Cross-Site Scripting
Slug
pay-addons-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pay-per-media-player
Published
2014-04-25
Title
Pay Per Media Player <= 1.24 - Multiple XSS
Slug
pay-with-contact-form-7
Published
2025-04-04
Title
Pay with Contact Form 7 <= 1.0.4 - Authenticated (Administrator+) SQL Injection
Slug
pay-with-contact-form-7
Published
2025-06-05
Title
Pay with Contact Form 7 <= 1.0.4 - Cross-Site Request Forgery
Slug
pay-with-contact-form-7
Published
2025-07-07
Title
Pay with Contact Form 7 <= 1.0.4 - Reflected Cross-Site Scripting
Slug
pay-with-tweet
Published
2014-08-01
Title
Pay With Tweet <= 1.1 - Multiple Vulnerabilities
Slug
pay-wp
Published
2026-07-16
Title
Autopay dla WooCommerce < 2.2.28 - Missing Authorization
Slug
payamito-sms-woocommerce
Published
2025-12-12
Title
افزونه پیامک ووکامرس فوق حرفه ای (جدید) payamito sms woocommerce <= 1.3.5 - Unauthenticated Time-Based Blind SQL Injection
Slug
payaza
Published
2025-12-04
Title
Payaza <= 0.3.8 - Missing Authorization to Unauthenticated Order Status Update
Slug
payday
Published
2025-04-03
Title
Payday <= 3.3.18 - Missing Authorization
Slug
payerurl-crypto-currency-payment-gateway-for-woocommerce
Published
2026-06-10
Title
ABC Crypto Checkout < 1.8.3 - Unauthenticated Information Exposure
Slug
payflex-payment-gateway
Published
2024-07-10
Title
Payflex Payment Gateway < 2.6.0 - Missing Authorization to Order Status Update
Slug
payflex-payment-gateway
Published
2024-09-30
Title
Payflex Payment Gateway < 2.6.2 - Open Redirect
Slug
payform
Published
2025-01-16
Title
PayForm <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
paygreen-payment-gateway
Published
2025-01-06
Title
PayGreen Payment Gateway < 1.0.27 - Reflected Cross-Site Scripting