WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
page-list
Published
2024-09-30
Title
Page-list < 5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
page-list
Published
2025-09-22
Title
Page-list <= 5.8 - Contributor+ Stored XSS
Slug
page-list
Published
2026-06-05
Title
Page-list < 6.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode Attributes
Slug
page-loading-effects
Published
2023-01-19
Title
Page Loading Effects < 3.0.0 - Admin+ Stored XSS
Slug
page-manager-for-elementor
Published
2025-08-25
Title
Page Manager for Elementor <= 2.0.5 - Missing Authorization
Slug
page-manager-for-elementor
Published
2025-09-26
Title
Page Manager for Elementor <= 2.0.5 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
page-or-post-clone
Published
2024-06-28
Title
Page and Post Clone < 6.1 - Insecure Direct Object Reference to Authenticated (Author+) Sensitive Information Exposure
Slug
page-or-post-clone
Published
2026-03-04
Title
Page and Post Clone < 6.4 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter
Slug
page-parts
Published
2024-11-20
Title
Page Parts < 1.4.4 - Reflected Cross-Site Scripting
Slug
page-post-notes
Published
2025-11-06
Title
Page & Post Notes < 1.3.5 - Missing Authorization to Authenticated (Subscriber+) Note Update/Deletion
Slug
page-scroll-to-id
Published
2022-12-21
Title
Page Scroll To ID < 1.7.6 - Contributor+ Stored XSS
Slug
page-scroll-to-id
Published
2024-02-16
Title
Page scroll to id < 1.7.9 - Contributor+ Stored XSS
Slug
page-showcaser-boxes
Published
2014-08-01
Title
Page Showcaser Boxes - Title Field Stored XSS
Slug
page-specific-sidebars
Published
2024-11-01
Title
Simple Page Specific Sidebars <= 2.14.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
page-studio-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
page-studio-lite
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
page-takeover
Published
2025-03-28
Title
Page Takeover < 1.1.7 - Admin+ Stored XSS
Slug
page-title-description-open-graph-updater
Published
2026-02-18
Title
Page Title, Description & Open Graph Updater <= 1.02 - Cross-Site Request Forgery to Arbitrary Page Title Modification
Slug
page-title-splitter
Published
2025-12-31
Title
Page Title Splitter <= 2.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
page-transition
Published
2025-08-19
Title
Page Transition <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
page-views-count
Published
2021-07-12
Title
Page View Counts < 2.4.9 - Contributor+ Stored XSS
Slug
page-views-count
Published
2022-02-01
Title
Page Views Count < 2.4.15 - Unauthenticated SQL Injection
Slug
page-views-count
Published
2022-10-13
Title
Page View Count < 2.5.6 - Settings Reset via CSRF
Slug
page-views-count
Published
2023-01-10
Title
Page View Count < 2.6.1 - Contributor+ Stored XSS
Slug
page-views-count
Published
2025-04-30
Title
Page View Count 2.8.0 - 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update