WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
portfolio
Published
2025-09-22
Title
Portfolio <= 2.58 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
portfolio-and-projects
Published
2025-03-14
Title
Portfolio and Projects <= 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
portfolio-and-projects
Published
2025-12-05
Title
Portfolio and Projects < 1.5.6 - Authenticated (Contributor+) Information Exposure
Slug
portfolio-builder-elementor
Published
2024-11-19
Title
Elementor Portfolio Builder <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
portfolio-by-lisa-westlund
Published
2015-07-20
Title
Portfolio 1.0 - Cross-Site Request Forgery (CSRF)
Slug
portfolio-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
portfolio-elementor
Published
2023-01-03
Title
Portfolio for Elementor, Image Gallery & Post Grid | PowerFolio < 2.3.1 - Contributor+ Stored XSS via Shortcode
Slug
portfolio-elementor
Published
2024-01-16
Title
Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
portfolio-elementor
Published
2025-07-03
Title
Portfolio for Elementor & Image Gallery | PowerFolio < 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
Slug
portfolio-elementor
Published
2025-09-22
Title
PowerFolio < 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
portfolio-filter-gallery
Published
2020-01-29
Title
Portfolio Filter Gallery < 1.1.3 - CSRF & Reflected XSS
Slug
portfolio-filter-gallery
Published
2024-03-25
Title
Portfolio Gallery – Image Gallery Plugin < 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
portfolio-filter-gallery
Published
2024-06-26
Title
Portfolio Gallery – Image Gallery Plugin < 1.6.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
portfolio-gallery
Published
2015-08-24
Title
Portfolio Gallery < 1.5.9 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
portfolio-gallery
Published
2016-10-04
Title
Portfolio <= 2.1.10 - Reflected Cross-Site Scripting (XSS)
Slug
portfolio-gallery
Published
2014-09-19
Title
Portfolio Gallery < 1.1.9 - SQL Injection
Slug
portfolio-manager-powered-by-behance
Published
2025-04-04
Title
Behance Portfolio Manager < 1.8.0 - Authenticated (Administrator+) SQL Injection
Slug
portfolio-manager-powered-by-behance
Published
2025-03-31
Title
Behance Portfolio Manager < 1.8.0 - Authenticated (Contributor+) SQL Injection
Slug
portfolio-manager-powered-by-behance
Published
2025-06-05
Title
Behance Portfolio Manager <= 1.7.4 - Missing Authorization
Slug
portfolio-manager-powered-by-behance
Published
2025-09-22
Title
Behance Portfolio Manager < 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
portfolio-manager-powered-by-behance
Published
2025-12-31
Title
Behance Portfolio Manager < 1.8.0 - Cross-Site Request Forgery
Slug
portfolio-manager-powered-by-behance
Published
2025-12-31
Title
Behance Portfolio Manager < 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
portfolio-pro
Published
2024-12-16
Title
Portfolio – Filterable Masonry Portfolio Gallery for Professionals <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
portfolio-responsive-gallery
Published
2021-06-29
Title
Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL Injections
Slug
portfolio-responsive-gallery
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)