WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
point-maker
Published
2025-03-04
Title
Point Maker <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
points-and-rewards-for-woocommerce
Published
2026-01-19
Title
Points and Rewards for WooCommerce < 2.9.6 - Missing Authorization
Slug
pojo-accessibility
Published
2025-04-09
Title
One Click Accessibility < 3.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
pojo-accessibility
Published
2025-10-15
Title
Ally - Web Accessibility & Usability < 3.8.1 - Cross-Site Request Forgery to Plugin Settings Update
Slug
pojo-accessibility
Published
2026-02-19
Title
Ally < 4.0.3 - Missing Authorization
Slug
pojo-accessibility
Published
2026-03-10
Title
Ally < 4.1.0 - Unauthenticated SQLi via URL Path
Slug
pojo-forms
Published
2024-12-05
Title
Pojo Forms < 1.4.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via form_preview_shortcode
Slug
policy-genius
Published
2025-01-10
Title
Policy Genius <= 2.0.4 - Reflected XSS
Slug
poll-builder
Published
2024-12-11
Title
Poll Builder <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
poll-maker
Published
2021-06-29
Title
Poll Maker < 3.2.1 - Authenticated Blind SQL Injections
Slug
poll-maker
Published
2021-07-28
Title
Poll Maker < 3.2.9 - Reflected Cross-Site Scripting
Slug
poll-maker
Published
2021-09-13
Title
Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection
Slug
poll-maker
Published
2022-05-04
Title
Poll Maker < 4.0.2 - Admin+ Stored Cross-Site Scripting
Slug
poll-maker
Published
2023-09-25
Title
Poll Maker < 4.7.1 - Reflected XSS
Slug
poll-maker
Published
2023-10-12
Title
Poll Maker < 4.7.2 - Missing Authorization
Slug
poll-maker
Published
2023-12-26
Title
Poll Maker < 4.8.1 - Missing Authorization
Slug
poll-maker
Published
2024-04-18
Title
Poll Maker – Best WordPress Poll Plugin < 5.1.9 - Missing Authorization to Unauthenticated Email Enumeration
Slug
poll-maker
Published
2024-04-18
Title
Poll Maker – Best WordPress Poll Plugin < 5.1.9 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
Slug
poll-maker
Published
2024-10-25
Title
Poll Maker – Versus Polls, Anonymous Polls, Image Polls < 5.4.7 - Authenticated (Administrator+) SQL Injection via Order_by Parameter
Slug
poll-maker
Published
2024-10-25
Title
Poll Maker – Versus Polls, Anonymous Polls, Image Polls < 5.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings
Slug
poll-maker
Published
2024-11-08
Title
WordPress Poll Maker Plugin < 5.4.7 - Authenticated (Administrator+) Time-Based SQL Injection
Slug
poll-maker
Published
2024-12-06
Title
Poll Maker < 5.5.5 - Cross-Site Request Forgery to Poll Duplication
Slug
poll-maker
Published
2025-01-03
Title
Poll Maker < 5.5.7 - Missing Authorization
Slug
poll-maker
Published
2025-01-03
Title
Poll Maker < 5.5.5 - Unauthenticated HTML Injection
Slug
poll-maker
Published
2025-02-23
Title
Poll Maker < 5.5.4 - Admin+ Stored XSS