WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
telsender
Published
2023-09-04
Title
TelSender < 1.14.12 - Subscriber+ Settings Update
Slug
telugu-bible-verse-daily
Published
2021-07-19
Title
Telugu Bible Verse Daily <= 1.0 - CSRF to Stored XSS
Slug
temp-mail
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
template-events-calendar
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
template-events-calendar
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
template-events-calendar
Published
2023-12-28
Title
Events Shortcodes & Templates For The Events Calendar < 2.3.2 - Authenticated (Contributor+) SQL Injection via shortcode
Slug
template-kit-export
Published
2024-07-06
Title
Template Kit – Export < 1.0.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
template-kit-import
Published
2024-04-01
Title
Template Kit – Import < 1.0.15 - Author+ Stored XSS
Slug
template-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
template-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
templately
Published
2023-10-16
Title
Templately < 2.2.6 - Unauthenticated Arbitrary Post Deletion
Slug
templately
Published
2024-09-25
Title
Templately < 3.1.3 - Missing Authorization
Slug
templately
Published
2024-10-24
Title
Templately < 3.1.6 - Missing Authorization via AJAX actions
Slug
templately
Published
2024-10-24
Title
Templately < 3.1.6 - Missing Authorization
Slug
templately
Published
2025-08-20
Title
Templately < 3.2.8 - Authenticated (Author+) Information Disclosure
Slug
templately
Published
2026-01-09
Title
Templately < 3.4.9 - Unauthenticated Limited Arbitrary JSON File Write
Slug
templatera
Published
2025-08-14
Title
Templatera < 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
templates-patterns-collection
Published
2023-11-07
Title
Cloud Templates & Patterns collection < 1.2.3 - Sensitive Information Exposure via Log File
Slug
templatesnext-onepager
Published
2024-06-06
Title
TemplatesNext OnePager <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
templatesnext-toolkit
Published
2023-01-17
Title
TemplatesNext ToolKit < 3.2.8 - Contributor+ Stored XSS via Shortcode
Slug
templatesnext-toolkit
Published
2023-01-18
Title
TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS
Slug
templatesnext-toolkit
Published
2023-01-17
Title
TemplatesNext ToolKit < 3.2.8 - Contributor+ Stored XSS
Slug
templatesnext-toolkit
Published
2025-01-06
Title
TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
templatesnext-toolkit
Published
2025-02-28
Title
TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
templatespare
Published
2024-08-02
Title
Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor & Gutenberg Blocks! – TemplateSpare < 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Theme Update