WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
plugin-notes-plus
Published
2024-08-16
Title
Plugin Notes Plus < 1.2.8 - Authenticated (Subscriber+) Arbitrary Note Deletion
Slug
plugin-optimizer
Published
2025-12-25
Title
Plugin Optimizer <= 1.3.7 - Missing Authorization
Slug
plugin-organizer
Published
2025-12-08
Title
Plugin Organizer < 10.2.4 - Subscriber+ SQLi
Slug
plugin-security-scanner
Published
2025-09-22
Title
Plugin Security Scanner <= 2.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
plugin-update-blocker
Published
2025-09-10
Title
Plugin updates blocker <= 0.2 - Cross-Site Request Forgery
Slug
pluginpass-pro-plugintheme-licensing
Published
2025-03-14
Title
PluginPass <= 0.9.10 - Unauthenticated Arbitrary File Deletion
Slug
plugins-last-updated-column
Published
2025-03-11
Title
Plugins Last Updated Column < 0.1.4 - Cache Clear via CSRF
Slug
plugins-list
Published
2023-08-18
Title
Plugins List < 2.5.1 - Admin+ Stored XSS
Slug
plugins-on-steroids
Published
2023-12-27
Title
Eazy Plugin Manager < 4.1.3 - Missing Authorization via update_options
Slug
plugins-on-steroids
Published
2025-04-09
Title
Eazy Plugin Manager < 4.4.0 - Missing Authorization
Slug
plugmatter-optin-feature-box-lite
Published
2015-07-16
Title
Plugmatter Optin Feature Box <= 2.0.13 - Unauthenticated Blind SQL Injection
Slug
plugmatter-pricing-table
Published
2021-08-13
Title
Plugmatter Pricing Table Lite <= 1.0.32 - Reflected Cross-Site Scripting
Slug
plugnedit
Published
2015-08-25
Title
PlugNedit Adaptive Editor < 6.2.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
plugversions
Published
2024-12-23
Title
PlugVersions – Easily rollback to previous versions of your plugins < 0.0.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation
Slug
pluscaptcha
Published
2015-03-22
Title
PlusCaptcha Plugin < 2.1.0 - Cross-Site Request Forgery (CSRF)
Slug
pmpro-mailchimp
Published
2024-03-28
Title
Paid Memberships Pro – Mailchimp Add On < 2.3.5 - Unauthenticated Information Disclosure
Slug
pmpro-member-directory
Published
2024-07-09
Title
Paid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLi
Slug
pmpro-membership-maps
Published
2024-07-09
Title
Paid Memberships Pro - Membership Maps Add On < 0.7 - Contributor+ Sensitive Information Disclosure
Slug
pmpro-payfast
Published
2024-03-28
Title
Paid Memberships Pro – Payfast Gateway Add On < 1.4.2 - Unauthenticated Information Exposure
Slug
pmpro-register-helper
Published
2023-01-06
Title
Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via Shortcode
Slug
png-to-jpg
Published
2022-05-06
Title
PNG to JPG < 4.1 - Stored Cross-Site Scripting via CSRF
Slug
pochipp
Published
2025-12-14
Title
Pochipp < 1.18.1 - Missing Authorization
Slug
pochipp
Published
2026-02-25
Title
Pochipp < 1.18.9 - Missing Authorization
Slug
pocket-news-generator
Published
2024-03-28
Title
Pocket News Generator <= 0.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
pocket-news-generator
Published
2024-03-28
Title
Pocket News Generator <= 0.2.0 - Cross-Site Request Forgery to Settings Update