WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
page-builder-sandwich
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
page-builder-sandwich
Published
2024-03-04
Title
Page Builder Sandwich <= 5.1.0 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Post Editing
Slug
page-builder-sandwich
Published
2024-03-04
Title
Page Builder Sandwich – Front End WordPress Page Builder Plugin <= 5.1.0 - Sensitive Information Exposure
Slug
page-builder-sandwich
Published
2024-06-21
Title
Page Builder Sandwich – Front-End Page Builder <= 5.1.0 - Missing Authorization
Slug
page-builder-sandwich
Published
2024-06-21
Title
Page Builder Sandwich – Front-End Page Builder <= 5.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
page-expire-popup
Published
2026-01-05
Title
Page Expire Popup/Redirection for WordPress < 1.1 - Authenticated (Author+) SQL Injection via 'id' Shortcode Attribute
Slug
page-flip-image-gallery
Published
2014-08-01
Title
Page Flip Image Gallery <= 0.2.2 - Remote FD Vuln
Slug
page-generator
Published
2021-09-20
Title
Page Generator < 1.5.9 - Reflected Cross-Site Scripting
Slug
page-generator
Published
2022-06-27
Title
Page Generator Plugin < 1.6.6 - Arbitrary Keywords Deletion/Duplication via CSRF
Slug
page-generator
Published
2022-06-27
Title
Page Generator Plugin < 1.6.5 - Admin+ Stored Cross-Site Scripting
Slug
page-generator
Published
2023-12-28
Title
Page Generator < 1.7.2 - Authenticated(Administrator+) SQL Injection
Slug
page-health-o-meter
Published
2025-01-16
Title
Page Health-O-Meter <= 2.0 - Reflected Cross-Site Scripting
Slug
page-keys
Published
2026-01-06
Title
Page Keys < 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'page_key' Parameter
Slug
page-layout-builder
Published
2014-08-01
Title
Page Layout Builder 1.3.4 - includes/layout-settings.php layout_settings_id Parameter Reflected XSS
Slug
page-layout-builder
Published
2014-08-01
Title
Page Layout Builder 1.3.4 - Unspecified Issue
Slug
page-layout-builder
Published
2016-04-12
Title
MiniMax <= 2.0.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
page-list
Published
2022-12-27
Title
Page-list < 5.3 - Contributor+ Stored XSS
Slug
page-list
Published
2024-09-30
Title
Page-list < 5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
page-list
Published
2025-09-22
Title
Page-list <= 5.8 - Contributor+ Stored XSS
Slug
page-loading-effects
Published
2023-01-19
Title
Page Loading Effects < 3.0.0 - Admin+ Stored XSS
Slug
page-manager-for-elementor
Published
2025-08-25
Title
Page Manager for Elementor <= 2.0.5 - Missing Authorization
Slug
page-manager-for-elementor
Published
2025-09-26
Title
Page Manager for Elementor <= 2.0.5 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
page-or-post-clone
Published
2024-06-28
Title
Page and Post Clone < 6.1 - Insecure Direct Object Reference to Authenticated (Author+) Sensitive Information Exposure
Slug
page-parts
Published
2024-11-20
Title
Page Parts < 1.4.4 - Reflected Cross-Site Scripting
Slug
page-post-notes
Published
2025-11-06
Title
Page & Post Notes < 1.3.5 - Missing Authorization to Authenticated (Subscriber+) Note Update/Deletion