WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
plainview-protect-passwords
Published
2023-11-08
Title
Plainview Protect Passwords <= 1.4 - Cross-Site Request Forgery
Slug
planaday-api
Published
2024-12-11
Title
Planaday API < 11.5 - Reflected Cross-Site Scripting
Slug
planetcalc
Published
2025-09-29
Title
planetcalc <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via language Parameter
Slug
planning-center-online-giving
Published
2024-11-03
Title
Planning Center Online Giving <= 1.0.0 - Contributor+ XSS via Shortcode
Slug
planso-forms
Published
2021-09-15
Title
PlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site Scripting
Slug
planyo-online-reservation-system
Published
2025-04-01
Title
Planyo online reservation system <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
platformly
Published
2024-11-01
Title
Platform.ly Official < 1.14 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
platformly-for-woocommerce
Published
2025-03-06
Title
Platform.ly for WooCommerce < 1.1.7 - Unauthenticated Blind Server-Side Request Forgery
Slug
platinum-seo-pack
Published
2014-08-01
Title
platinum_seo_pack.php - s Parameter Reflected XSS
Slug
platinum-seo-pack
Published
2024-03-29
Title
Platinum SEO <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
plationline
Published
2025-06-27
Title
PlatiOnline Payments < 7.0.1 - Missing Authorization
Slug
plausible-analytics
Published
2022-04-07
Title
Plausible Analytics < 1.2.3 - Admin+ Stored Cross-Site Scripting
Slug
plausible-analytics
Published
2022-05-27
Title
Plausible Analytics < 1.2.4 - Subscriber+ Arbitrary Settings Update
Slug
plausible-analytics
Published
2023-08-16
Title
Plausible Analytics < 1.3.4 - Reflected XSS
Slug
play-ht
Published
2024-02-22
Title
Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Missing Authorization
Slug
play-ht
Published
2024-02-22
Title
Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Cross-Site Request Forgery
Slug
play-ht
Published
2024-02-22
Title
Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Authenticated (Contributor+) PHP Object Injection
Slug
play-ht
Published
2024-06-21
Title
Play.ht <= 3.6.4 - Missing Authorization
Slug
player
Published
2013-04-11
Title
Spider Video Player <= 2.1 - SQL Injection
Slug
player
Published
2013-12-09
Title
Spider Video Player <= 2.1 - Reflected Cross-Site Scripting (XSS)
Slug
player
Published
2014-11-11
Title
WordPress Video Player < 1.5.2 - Multiple Cross-Site Scripting (XSS)
Slug
player
Published
2015-02-02
Title
WordPress Video Player <= 1.5.4 - Reflected Cross-Site Scripting (XSS)
Slug
player
Published
2016-07-19
Title
WordPress Video Player < 1.5.18 - Multiple Authenticated Blind SQL Injection
Slug
player
Published
2023-10-18
Title
Video Player <= 1.5.22 - Reflected XSS
Slug
player
Published
2023-11-23
Title
Video Player <= 1.5.22 - Authenticated (Administrator+) Stored Cross-Site Scripting