WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
terms-of-service-and-privacy-policy
Published
2025-08-19
Title
Terms of Service & Privacy Policy Generator <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
terms-of-use-2
Published
2025-03-28
Title
Terms of Use <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
terms-popup-on-user-login
Published
2025-05-07
Title
TPUL < 2.0.9 - Admin+ Stored XSS
Slug
terraclassifieds
Published
2023-12-27
Title
TerraClassifieds <= 2.0.3 - Cross-Site Request Forgery
Slug
terraclassifieds
Published
2023-12-27
Title
TerraClassifieds <= 2.0.3 Unauthenticated Arbitrary File Upload
Slug
testimonial
Published
2024-03-25
Title
Testimonial Slider < 2.3.8 - Admin+ Stored Cross-Site Scripting
Slug
testimonial
Published
2025-04-03
Title
Testimonial Slider < 2.0.14 - Authenticated (Contributor+) PHP Object Injection
Slug
testimonial
Published
2025-10-05
Title
Testimonial Slider <= 2.0.15 - Missing Authorization
Slug
testimonial
Published
2025-12-25
Title
Testimonial Slider <= 2.0.15 - Missing Authorization
Slug
testimonial-add
Published
2022-04-04
Title
Testimonial Slider < 3.5.8.5 - Contributor+ Stored Cross-Site Scripting
Slug
testimonial-add
Published
2025-09-26
Title
Testimonial Slider <= 3.5.8.6 - Authenticated (Contributor+) Local File Inclusion
Slug
testimonial-builder
Published
2021-10-13
Title
Testimonial Builder < 1.6.0 - Admin+ Stored Cross-Site Scripting
Slug
testimonial-builder
Published
2022-08-08
Title
Testimonial Builder < 1.6.2 - Editor+ Stored Cross-Site Scripting
Slug
testimonial-free
Published
2020-03-02
Title
Testimonial < 2.1.7 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
testimonial-free
Published
2022-12-22
Title
Real Testimonials < 2.6.0 - Contributor+ Stored XSS
Slug
testimonial-free
Published
2025-04-11
Title
Real Testimonials < 3.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
testimonial-master
Published
2026-01-06
Title
Testimonial Master <= 0.2.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
testimonial-post-type
Published
2025-07-17
Title
Testimonial Post type <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play Parameter
Slug
testimonial-rotator
Published
2020-06-17
Title
Testimonial Rotator < 3.0.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
testimonial-rotator
Published
2021-02-19
Title
Testimonial Rotator <= 3.0.3 - Authenticated Stored Cross-Site Scripting
Slug
testimonial-slider
Published
2015-09-01
Title
Testimonial Slider < 1.3.2 - Authenticated Stored Cross-Site Scripting (XSS) & CSRF
Slug
testimonial-slider
Published
2018-01-10
Title
Testimonial Slider <= 1.2.4 - Authenticated SQL Injection
Slug
testimonial-slider
Published
2022-11-07
Title
Testimonial Slider < 1.3.2 - Stored XSS via CSRF
Slug
testimonial-slider
Published
2024-05-03
Title
Testimonial Slider < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
testimonial-slider-and-showcase
Published
2024-03-05
Title
Testimonial Slider < 2.3.7 - Author+ Settings Update