WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
porto-functionality
Published
2025-10-11
Title
Porto Theme - Functionality < 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
porto-functionality
Published
2025-10-12
Title
Porto Theme - Functionality < 3.7.3 - Missing Authorization
Slug
portrait-archiv-shop
Published
2019-09-03
Title
Portrait-Archiv.com Photostore <= 3.1 - Unauthenticated Reflected XSS
Slug
portugal-ctt-tracking-woocommerce
Published
2024-02-05
Title
Portugal CTT Tracking for WooCommerce < 2.2 - Reflected Cross-Site Scripting
Slug
post-and-page-builder
Published
2023-08-22
Title
Post and Page Builder by BoldGrid < 1.24.2 - Editor Settings Update via CSRF
Slug
post-and-page-builder
Published
2024-03-25
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin < 1.26.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-and-page-builder
Published
2024-05-15
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.26.5 - Authenticated (Contributer+) Stored Cross-Site Scripting
Slug
post-and-page-builder
Published
2024-07-19
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.26.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload
Slug
post-and-page-builder
Published
2025-01-14
Title
Post and Page Builder by BoldGrid < 1.27.6 - Contributor+ Stored XSS
Slug
post-and-page-builder
Published
2025-02-05
Title
Post and Page Builder by BoldGrid < 1.27.7 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
Slug
post-and-page-builder
Published
2025-06-19
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.27.9 - Cross-Site Request Forgery
Slug
post-and-page-builder
Published
2025-06-19
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.27.9 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
post-and-page-builder
Published
2025-07-22
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.27.9 - Authenticated (Contributor+) Path Traversal
Slug
post-and-page-builder
Published
2026-01-05
Title
Post and Page Builder by BoldGrid < 1.27.10 - Missing Authorization
Slug
post-and-page-reactions
Published
2025-01-07
Title
Post And Page Reactions <= 1.0.5 - Reflected Cross-Site Scripting
Slug
post-author
Published
2025-06-05
Title
Post Author <= 1.1.1 - Cross-Site Request Forgery
Slug
post-block
Published
2024-07-10
Title
FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor < 5.3.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
post-block
Published
2025-01-06
Title
FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor < 6.0.1 - Missing Authorization to Authenticated (Subscriber+) Shortcode Export
Slug
post-block
Published
2025-04-01
Title
FancyPost <= 6.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-by-email
Published
2024-11-18
Title
Post By Email <= 1.0.4b - Reflected Cross-Site Scripting
Slug
post-by-email
Published
2025-09-29
Title
Post By Email <= 1.0.4b - Unauthenticated Arbitrary File Upload via Email Attachments
Slug
post-carousel
Published
2021-08-16
Title
Post Carousel < 2.3.5 - CSRF Bypass / Unauthorised AJAX Calls
Slug
post-carousel
Published
2023-01-06
Title
Post Grid, Post Carousel, & List Category Posts < 2.4.19 - Contributor+ Stored XSS
Slug
post-carousel
Published
2024-04-04
Title
Post Grid, Post Carousel, & List Category Posts < 2.4.28 - Editor+ Stored XSS
Slug
post-carousel
Published
2024-07-17
Title
Smart Post Show <= 3.0.0 - Editor+ Stored XSS