WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
posts-and-products-views
Published
2024-12-13
Title
Posts and Products Views for WooCommerce < 2.1.1 - Contributor+ Stored XSS
Slug
posts-and-users-stats
Published
2023-11-07
Title
Posts and Users Stats < 1.1.4 - Improper Neutralization of Formula Elements in a CSV File
Slug
posts-by-tag
Published
2025-10-22
Title
Posts By Tag <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posts-data-table
Published
2025-09-03
Title
Posts Table with Search & Sort < 1.4.11 - Missing Authorization
Slug
posts-date-ranges
Published
2024-12-12
Title
Posts Date Ranges <= 2.2 - Reflected Cross-Site Scripting
Slug
posts-filter
Published
2024-11-08
Title
Posts Filter <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posts-for-page
Published
2025-04-25
Title
Posts for Page <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posts-in-page
Published
2017-02-15
Title
Posts In Page < 1.3.0 - Directory Traversal
Slug
posts-map
Published
2026-04-21
Title
Posts map <= 0.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute
Slug
posts-navigation-links-for-sections-and-headings-free-by-wp-masters
Published
2025-11-03
Title
Posts Navigation Links for Sections and Headings - Free by WP Masters <= 1.0.1 - Cross-Site Request Forgery to Settings Update
Slug
posts-per-cat
Published
2025-05-15
Title
Posts per Cat [Unmaintained] < 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posts-reminder
Published
2024-08-27
Title
Posts reminder <= 0.20 - Settings Update via CSRF
Slug
posts-search
Published
2024-11-08
Title
Posts Search <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posts-slider-shortcode
Published
2025-07-04
Title
Posts Slider Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posts-table-filterable
Published
2021-10-18
Title
TableOn < 1.0.1 - Reflected Cross-Site Scripting
Slug
posts-table-filterable
Published
2025-04-04
Title
TableOn – WordPress Posts Table Filterable <= 1.0.4 - Missing Authorization
Slug
posts-table-filterable
Published
2025-04-10
Title
TableOn – WordPress Posts Table Filterable < 1.0.4.4 - Unauthenticated PHP Object Injection
Slug
posts-table-filterable
Published
2025-04-14
Title
TableOn – WordPress Posts Table Filterable < 1.0.4 - Unauthenticated Stored Cross-Site Scripting
Slug
posts-table-filterable
Published
2025-06-20
Title
TableOn – WordPress Posts Table Filterable < 1.0.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode
Slug
posts-table-filterable
Published
2025-05-22
Title
TableOn < 1.0.6 - Unauthenticated Arbitrary Shortcode Execution
Slug
posts-table-filterable
Published
2026-01-20
Title
TableOn < 1.0.4.3 - Reflected Cross-Site Scripting
Slug
posts-table-filterable
Published
2026-04-07
Title
TableOn – WordPress Posts Table Filterable < 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute
Slug
posts-table-filterable
Published
2026-05-30
Title
TableOn – WordPress Posts Table Filterable  < 1.0.6 - Unauthenticated SQL Injection
Slug
posts-to-page
Published
2024-01-03
Title
Posts to Page <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posttabs
Published
2022-05-23
Title
postTabs <= 2.10.6 - Arbitrary Settings Update via CSRF to Stored XSS