WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
philantro
Published
2024-12-17
Title
Philantro – Donations and Donor Management < 5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
philantro
Published
2025-01-27
Title
Philantro – Donations and Donor Management < 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via donate Shortcode
Slug
phoenix-media-rename
Published
2021-10-06
Title
Phoenix Media Rename < 3.4.4 - Author Arbitrary Media File Renaming
Slug
phone-orders-for-woocommerce
Published
2022-10-24
Title
Phone Orders for WooCommerce < 3.7.2 - Subscriber+ Sensitive Data Exposure
Slug
phone2app
Published
2026-07-24
Title
phone2app <= 1.0 - Unauthenticated Stored XSS via phone2appFormService.php
Slug
phonepe-payment-solutions
Published
2026-06-26
Title
PhonePe Payment Solutions < 3.1.0 - Unauthenticated Payment Bypass via Forged Callback
Slug
phonetrack-meu-site-manager
Published
2021-07-19
Title
PhoneTrack Meu Site Manager <= 0.1 - Authenticated Stored XSS
Slug
photo-block
Published
2025-12-15
Title
Photo Block < 1.6.0 - Missing Authorization
Slug
photo-block
Published
2026-07-22
Title
Photo Block – A Modern Image Block With Lightbox and Caption Support <= 1.7.1 - Authenticated (Author+) Sever-Side Request Forgery
Slug
photo-contest
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
photo-contest
Published
2021-07-16
Title
WordPress Photo Gallery – Image Gallery <= 1.0.6 - Cross-Site Request Forgery
Slug
photo-express-for-google
Published
2025-06-23
Title
Photo Express for Google <= 0.3.2 - Reflected Cross-Site Scripting
Slug
photo-feed
Published
2023-11-07
Title
Photo Feed <= 2.2.1 - Reflected XSS
Slug
photo-gallery
Published
2014-05-07
Title
Photo-Gallery <= 1.2.41 - UploadHandler.php File Upload CSRF
Slug
photo-gallery
Published
2015-01-12
Title
Photo Gallery <= 1.2.7 - Unauthenticated SQL injection
Slug
photo-gallery
Published
2015-02-12
Title
Photo Gallery <= 1.2.5 - Unrestricted File Upload
Slug
photo-gallery
Published
2015-01-28
Title
Photo Gallery < 1.2.11 - Blind SQL Injection
Slug
photo-gallery
Published
2014-10-01
Title
Photo Gallery 1.1.30 - Cross Site Scripting
Slug
photo-gallery
Published
2015-03-19
Title
Photo Gallery < 1.2.13 - Cross-Site Scripting (XSS)
Slug
photo-gallery
Published
2017-05-02
Title
Photo Gallery by WD <= 1.3.35 - Authenticated SQL Injection
Slug
photo-gallery
Published
2017-06-16
Title
Photo Gallery by WD <= 1.3.42 - Authenticated Path Traversal
Slug
photo-gallery
Published
2017-08-20
Title
Photo Gallery by WD <= 1.3.50 - Authenticated SQL Injection
Slug
photo-gallery
Published
2018-02-22
Title
Photo Gallery by WD <= 1.3.66 - Cross-Site Scripting (XSS)
Slug
photo-gallery
Published
2019-05-15
Title
Photo Gallery by 10Web <= 1.5.24 - Authenticated LFI
Slug
photo-gallery
Published
2019-05-13
Title
Photo Gallery by 10Web <= 1.5.22 - Authenticated XSS