WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pootle-page-builder
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
pootle-page-builder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pootle-page-builder
Published
2024-05-07
Title
Pootle Pagebuilder – WordPress Page builder <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pop-over-xyz
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
pop-over-xyz
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pop-up
Published
2022-09-26
Title
Pop-Up Chop Chop <= 2.1.7 - Contributor+ Stored Cross-Site Scripting
Slug
pop-up
Published
2025-03-28
Title
Pop-Up Chop Chop <= 2.1.7 - Authenticated (Contributor+) Local File Inclusion
Slug
pop-up-pop-up
Published
2022-09-02
Title
Pop-up < 1.1.6 - Arbitrary Settings Update via CSRF
Slug
pop-up-pop-up
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
pop-up-pop-up
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
popad
Published
2025-09-03
Title
PopAd <= 1.0.4 - Cross-Site Request Forgery to Settings Update
Slug
popad
Published
2025-09-26
Title
PopAd <= 1.0.4 - Authenticated (Admin+) Server-Side Request Forgery
Slug
popcashnet-code-integration-tool
Published
2017-10-12
Title
PopCash.Net Code Integration Tool <= 1.0 - Cross-Site Scripting (XSS)
Slug
popcashnet-code-integration-tool
Published
2026-01-11
Title
PopCash.Net Code Integration Tool < 2.0 - Missing Authorization
Slug
popliup
Published
2025-01-16
Title
Popliup – WordPress Popup Plugin <= 1.1.1 - Authenticated (Subscriber+) Local File Inclusion
Slug
popover-windows
Published
2025-12-12
Title
Popover Windows <= 1.2 - Missing Authorization to Authenticated (Subscriber+) Popover Configuration Update via AJAX Actions
Slug
popover-windows
Published
2025-12-12
Title
Popover Windows <= 1.2 - Cross-Site Request Forgery to Arbitrary Popover Configuration Update
Slug
popping-content-light
Published
2025-04-07
Title
Popping Content Light <= 2.4 - Reflected Cross-Site Scripting
Slug
popping-sidebars-and-widgets-light
Published
2025-09-05
Title
Popping Sidebars and Widgets Light <= 1.27 - Cross-Site Request Forgery
Slug
popping-sidebars-and-widgets-light
Published
2025-12-26
Title
Popping Sidebars and Widgets Light <= 1.27 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
poptics
Published
2025-12-29
Title
Poptics < 1.0.21 - Authenticated (Contributor+) Information Exposure
Slug
poptin
Published
2023-09-18
Title
Poptin < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
popular-posts-by-webline
Published
2025-09-27
Title
Popular Posts by Webline <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
popularis-extra
Published
2024-10-03
Title
Popularis Extra < 1.2.7 - Reflected Cross-Site Scripting
Slug
popularis-extra
Published
2024-11-15
Title
Popularis Extra < 1.2.8 - Authenticated (Contributor+) Post Disclosure