WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
portfolio-slideshow
Published
2023-02-17
Title
Portfolio Slideshow <= 1.13.0 - Contributor+ XSS
Slug
portfolio-slideshow-pro
Published
2014-08-01
Title
portfolio-slideshow-pro v3 - SQL Injection
Slug
portfolio-wp
Published
2022-03-15
Title
GridKit Portfolio < 2.1.0 - Subscriber+ Stored Cross-Site Scripting
Slug
portfolio-wp
Published
2025-11-19
Title
Multiple Plugins and Themes - Contributor+ DOM-Based Stored XSS via lightGallery Library
Slug
portfolleo
Published
2024-10-21
Title
Portfolleo <= 1.2 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
porto-functionality
Published
2023-11-23
Title
Porto Theme - Functionality < 2.12.1 - Missing Authorization
Slug
porto-functionality
Published
2023-11-23
Title
Porto Theme - Functionality < 2.12.1 - Unauthenticated SQL Injection
Slug
porto-functionality
Published
2024-05-08
Title
Porto Theme - Functionality < 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Post Meta
Slug
porto-functionality
Published
2024-05-08
Title
Porto Theme - Functionality < 3.1.1 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Slug
porto-functionality
Published
2025-10-11
Title
Porto Theme - Functionality < 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
porto-functionality
Published
2025-10-12
Title
Porto Theme - Functionality < 3.7.3 - Missing Authorization
Slug
portrait-archiv-shop
Published
2019-09-03
Title
Portrait-Archiv.com Photostore <= 3.1 - Unauthenticated Reflected XSS
Slug
portugal-ctt-tracking-woocommerce
Published
2024-02-05
Title
Portugal CTT Tracking for WooCommerce < 2.2 - Reflected Cross-Site Scripting
Slug
post-and-page-builder
Published
2023-08-22
Title
Post and Page Builder by BoldGrid < 1.24.2 - Editor Settings Update via CSRF
Slug
post-and-page-builder
Published
2024-03-25
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin < 1.26.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-and-page-builder
Published
2024-05-15
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.26.5 - Authenticated (Contributer+) Stored Cross-Site Scripting
Slug
post-and-page-builder
Published
2024-07-19
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.26.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload
Slug
post-and-page-builder
Published
2025-01-14
Title
Post and Page Builder by BoldGrid < 1.27.6 - Contributor+ Stored XSS
Slug
post-and-page-builder
Published
2025-02-05
Title
Post and Page Builder by BoldGrid < 1.27.7 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
Slug
post-and-page-builder
Published
2025-06-19
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.27.9 - Cross-Site Request Forgery
Slug
post-and-page-builder
Published
2025-06-19
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.27.9 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
post-and-page-builder
Published
2025-07-22
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.27.9 - Authenticated (Contributor+) Path Traversal
Slug
post-and-page-builder
Published
2026-01-05
Title
Post and Page Builder by BoldGrid < 1.27.10 - Missing Authorization
Slug
post-and-page-reactions
Published
2025-01-07
Title
Post And Page Reactions <= 1.0.5 - Reflected Cross-Site Scripting
Slug
post-author
Published
2025-06-05
Title
Post Author <= 1.1.1 - Cross-Site Request Forgery