WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
translation-pro
Published
2025-01-16
Title
Translation.Pro <= 1.0.0 - Reflected Cross-Site Scripting
Slug
translator
Published
2025-03-24
Title
Translator <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
translit-it
Published
2025-04-17
Title
translit it! <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
transmail
Published
2025-12-31
Title
Zoho ZeptoMail < 3.3.2 - Cross-Site Request Forgery
Slug
transportersio
Published
2025-01-06
Title
Transporters.io < 2.1.2 - Stored XSS via CSRF
Slug
transposh-translation-filter-for-wordpress
Published
2022-07-25
Title
Transposh WordPress Translation <= 1.0.8 - Unauthenticated Settings Change
Slug
transposh-translation-filter-for-wordpress
Published
2022-07-25
Title
Transposh WordPress Translation <= 1.0.8 - Usernames Disclosure
Slug
transposh-translation-filter-for-wordpress
Published
2022-07-26
Title
Transposh WordPress Translation <= 1.0.8 - Admin+ SQL Injection
Slug
transposh-translation-filter-for-wordpress
Published
2022-07-26
Title
Transposh WordPress Translation <= 1.0.8 - Subscriber+ Unauthorised Calls
Slug
transposh-translation-filter-for-wordpress
Published
2022-02-22
Title
Transposh WordPress Translation < 1.0.8 - Admin+ RCE
Slug
transposh-translation-filter-for-wordpress
Published
2022-02-22
Title
Transposh WordPress Translation < 1.0.8 - Reflected Cross-Site Scripting
Slug
transposh-translation-filter-for-wordpress
Published
2022-02-22
Title
Transposh WordPress Translation < 1.0.8 - CSRF to Stored XSS
Slug
transposh-translation-filter-for-wordpress
Published
2022-02-22
Title
Transposh WordPress Translation < 1.0.8 - Stored Cross-Site Scripting
Slug
transposh-translation-filter-for-wordpress
Published
2022-11-14
Title
Transposh WordPress Translation <= 1.0.8 - Settings Update via Authorization Bypass
Slug
tranzly
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tranzly
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
trash-duplicate-and-301-redirect
Published
2025-02-18
Title
Trash Duplicate and 301 Redirect < 1.9.1 - Unauthenticated Arbitrary Post Deletion
Slug
trash-duplicate-and-301-redirect
Published
2025-12-31
Title
Trash Duplicate and 301 Redirect <= 1.9.1 - Missing Authorization
Slug
travel-light
Published
2021-07-05
Title
Travel Light <= 1.0 - CSRF Bypass
Slug
traveler-code
Published
2025-01-31
Title
Traveler Code < 3.1.2 - Authenticated (Subscriber+) SQL Injection
Slug
traveler-code
Published
2025-01-31
Title
Traveler Code < 3.1.2 - Unauthenticated Arbitrary SQL Injection
Slug
traveler-layout-essential-for-elementor
Published
2025-01-31
Title
Traveler Layout Essential For Elementor < 1.4 - Unauthenticated Server-Side Request Forgery
Slug
travelers-map
Published
2024-03-25
Title
Travelers' Map < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
travelers-map
Published
2025-11-09
Title
Travelers' Map < 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
travelfic-toolkit
Published
2025-04-16
Title
Travelfic Toolkit < 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting