WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sitelock
Published
2025-12-30
Title
SiteLock Security < 5.0.2 - Missing Authorization
Slug
sitelock
Published
2026-01-25
Title
SiteLock Security < 5.0.3 - Missing Authorization
Slug
sitemap
Published
2022-12-27
Title
Sitemap < 4.4 - Contributor+ Stored XSS
Slug
sitemap-by-click5
Published
2022-04-11
Title
Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update
Slug
sitemap-index
Published
2023-02-20
Title
Sitemap Index <= 1.2.3 - Admin+ XSS
Slug
siteorigin-panels
Published
2015-01-12
Title
Page Builder by SiteOrigin 2.0.3 - Reflected XSS
Slug
siteorigin-panels
Published
2020-05-11
Title
Page Builder by SiteOrigin < 2.10.16 - CSRF to Reflected Cross-Site Scripting (XSS)
Slug
siteorigin-panels
Published
2024-03-22
Title
Page Builder by SiteOrigin < 2.29.7 - Contributor+ Stored XSS
Slug
siteorigin-panels
Published
2024-05-20
Title
Page Builder by SiteOrigin < 2.29.16 - Contributor+ Stored XSS via siteorigin_widget Shortcode
Slug
siteorigin-panels
Published
2025-01-13
Title
Page Builder by SiteOrigin < 2.31.1 - Contributor+ Stored XSS via Row Label Parameter
Slug
siteorigin-panels
Published
2025-02-28
Title
Page Builder by SiteOrigin < 2.31.5 - Contributor+ Stored XSS
Slug
siteorigin-panels
Published
2026-03-02
Title
Page Builder by SiteOrigin < 2.34.0 - Contributor+ Local File Inclusion
Slug
siteorigin-panels
Published
2026-06-26
Title
Page Builder by SiteOrigin < 2.34.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via panels_data Parameter
Slug
sitepact-klaviyo-contact-form-7
Published
2024-02-15
Title
Sitepact's Contact Form 7 Extension For Klaviyo < 3.0.0 - Unauthenticated SQL Injection
Slug
sitepress-multilingual-cms
Published
2015-03-12
Title
WPML < 3.1.9 - Multiple Vulnerabilities (Including SQLi)
Slug
sitepress-multilingual-cms
Published
2015-09-02
Title
WPML 2.9.3-3.2.6 - Cross-Site Scripting (XSS) in Accept-Language Header
Slug
sitepress-multilingual-cms
Published
2018-10-08
Title
WPML < 4.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
sitepress-multilingual-cms
Published
2020-03-09
Title
WPML < 4.3.7 - Authenticated Cross Site Request Forgery leading to Remote Code Execution
Slug
sitepress-multilingual-cms
Published
2022-11-09
Title
WPML < 4.5.14 - CSRF
Slug
sitepress-multilingual-cms
Published
2022-11-09
Title
WPML < 4.5.11 - Subscriber+ Settings Update
Slug
sitepress-multilingual-cms
Published
2022-11-09
Title
WPML < 4.5.11 - Subscriber+ Translation Job Status Update
Slug
sitepress-multilingual-cms
Published
2023-04-16
Title
WPML Multilingual CMS < 4.6.1 - Reflected Cross-Site Scripting
Slug
sitepress-multilingual-cms
Published
2024-08-21
Title
WPML Multilingual CMS < 4.6.13 - Contributor+ RCE via Twig Server-Side Template Injection
Slug
sitepress-multilingual-cms
Published
2025-05-01
Title
WPML Multilingual CMS 3.6.0 - 4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher Shortcode
Slug
siteseo
Published
2025-08-26
Title
SiteSEO – SEO Simplified < 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Broken Regex Expression