WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
travelmap-blog
Published
2025-09-22
Title
Travel Map < 1.0.4 - Cross-Site Request Forgery
Slug
travelpayouts
Published
2021-09-13
Title
Travelpayouts < 1.0.17 - CSRF Bypass due to Outdated Redux Framework
Slug
travelpayouts
Published
2024-01-23
Title
Travelpayouts < 1.1.14 - Reflected XSS
Slug
travelpayouts
Published
2024-01-26
Title
Travelpayouts < 1.1.13 - Settings Update via CSRF
Slug
travelpayouts
Published
2024-02-28
Title
Travelpayouts < 1.1.17 - Open Redirect
Slug
tree-website-map
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via CSRF
Slug
tree-website-map
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via Low Privilege User
Slug
treepress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
treepress
Published
2023-03-20
Title
TreePress – Easy Family Trees & Ancestor Profiles < 3.0.0 - Admin+ Stored Cross-Site Scripting
Slug
treepress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
trendy-restaurant-menu
Published
2024-11-08
Title
Trendy Restaurant Menu <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
triberr-wordpress-plugin
Published
2023-10-18
Title
Triberr < 4.1.2 - Admin+ Stored XSS
Slug
tribute-testimonial-gridslider
Published
2024-11-22
Title
Tribute Testimonials – WordPress Testimonial Grid/Slider <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
trinity-audio
Published
2025-06-05
Title
Trinity Audio < 5.20.1 - Missing Authorization
Slug
trinity-audio
Published
2025-10-03
Title
Trinity Audio < 5.21.0 - Reflected Cross-Site Scripting
Slug
trinity-audio
Published
2025-10-03
Title
Trinity Audio < 5.21.0 - Cross-Site Request Forgery
Slug
trinity-audio
Published
2025-10-10
Title
Trinity Audio < 5.22.0 - Unauthenticated Information Exposure
Slug
trinity-audio
Published
2025-12-12
Title
Trinity Audio < 5.24 - Missing Authorization
Slug
tripadvisor-shortcode
Published
2025-08-25
Title
Tripadvisor Shortcode <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
tripay-payment-gateway
Published
2023-11-23
Title
TriPay Payment Gateway < 3.2.8 - Admin+ Stored XSS
Slug
tripetto
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tripetto
Published
2022-04-26
Title
Tripetto < 5.2.0 - Unauthenticated Stored Cross-Site Scripting
Slug
tripetto
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tripetto
Published
2024-11-14
Title
Tripetto <= 8.0.6 - Unauthentiated Stored Cross-Site Scripting via Form File Upload
Slug
tripetto
Published
2025-01-06
Title
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto < 8.0.7 - Unauthenticated Stored Cross-Site Scripting