WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
page-views-count
Published
2025-12-08
Title
Page View Count < 2.9.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
page-visit-counter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
page-visit-counter
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
page-visits-counter-lite
Published
2026-09-08
Title
Page Visits Counter – Lite < 2.0.0 - Unauthenticated Stored Cross-Site Scripting
Slug
pagebar
Published
2022-06-15
Title
Pagebar < 2.70 - Arbitrary Settings Update via CSRF to Stored XSS
Slug
paged-gallery
Published
2025-06-05
Title
Paged Gallery <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pagelayer
Published
2020-12-10
Title
Pagelayer < 1.3.5 - Multiple Reflected Cross-Site Scripting (XSS)
Slug
pagelayer
Published
2020-05-28
Title
Page Builder: PageLayer - Drag and Drop website builder < 1.1.2 - Unprotected AJAX's leading to XSS
Slug
pagelayer
Published
2020-05-28
Title
Page Builder: PageLayer - Drag and Drop website builder < 1.1.2 - CSRF leading to XSS
Slug
pagelayer
Published
2023-09-25
Title
PageLayer < 1.7.7 - Unauthenticated Stored XSS
Slug
pagelayer
Published
2023-09-25
Title
PageLayer < 1.7.8 - Author+ Stored XSS
Slug
pagelayer
Published
2023-09-13
Title
PageLayer < 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pagelayer
Published
2024-01-03
Title
PageLayer < 1.7.9 - Contributor+ Stored XSS
Slug
pagelayer
Published
2024-01-08
Title
PageLayer < 1.8.0 - Author+ Stored XSS
Slug
pagelayer
Published
2023-12-24
Title
PageLayer < 1.8.1 - Admin+ Stored XSS
Slug
pagelayer
Published
2024-02-22
Title
Page Builder < 1.8.3 - Contributor+ Stored XSS
Slug
pagelayer
Published
2024-03-07
Title
Page Builder: Pagelayer – Drag and Drop website builder < 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
Slug
pagelayer
Published
2024-03-21
Title
Page Builder: Pagelayer – Drag and Drop website builder < 1.8.5 - Contributor+ Stored XSS
Slug
pagelayer
Published
2024-03-28
Title
PageLayer < 1.8.2 - Missing Authorization
Slug
pagelayer
Published
2024-08-28
Title
PageLayer < 1.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
pagelayer
Published
2024-07-28
Title
Pagelayer < 1.8.8 - Admin+ Stored XSS
Slug
pagelayer
Published
2024-09-04
Title
Page Builder: Pagelayer < 1.9.0- Admin+ Stored XSS
Slug
pagelayer
Published
2025-01-24
Title
PageLayer < 1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pagelayer
Published
2025-03-09
Title
Page Builder: Pagelayer – Drag and Drop website builder < 1.9.9 - Cross-Site Request Forgery (CSRF) To Post Contents Modification
Slug
pagelayer
Published
2025-03-11
Title
Page Builder: Pagelayer – Drag and Drop website builder < 1.9.9 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode