WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tailpress
Published
2025-04-03
Title
TailPress <= 0.4.4 - Unauthenticated Sensitive Information Exposure
Slug
tainacan
Published
2023-11-20
Title
Tainacan < 0.20.5 - Reflected Cross-Site Scripting
Slug
tainacan
Published
2024-02-26
Title
Tainacan < 0.20.7 - Unauthenticated Sensitive Information Exposure
Slug
tainacan
Published
2024-03-29
Title
Tainacan < 0.20.8 - Missing Authorization
Slug
tainacan
Published
2024-05-20
Title
Tainacan < 0.21.4 - Unauthenticated Stored Cross-Site Scripting
Slug
tainacan
Published
2024-05-20
Title
Tainacan < 0.21.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tainacan
Published
2024-07-30
Title
Tainacan < 0.21.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Slug
tainacan
Published
2024-10-10
Title
Tainacan < 0.21.11 - Reflected Cross-Site Scripting
Slug
tainacan
Published
2024-10-09
Title
Tainacan < 0.21.9 - Authenticated (Subscriber+) SQL Injection
Slug
tainacan
Published
2025-01-22
Title
Tainacan < 0.21.13 - Authenticated (Subscriber+) SQL Injection
Slug
tainacan
Published
2025-05-16
Title
Tainacan < 0.21.15 - Unauthenticated Arbitrary File Deletion
Slug
tainacan
Published
2025-11-20
Title
Tainacan < 1.0.1 - Reflected Cross-Site Scripting
Slug
tainacan
Published
2025-11-20
Title
Tainacan < 1.0.1 - Unauthenticated Information Exposure
Slug
tainacan
Published
2025-12-20
Title
Tainacan < 1.0.2 - Missing Authorization to Unauthenticated Arbitrary Metadata Section Creation
Slug
tajer
Published
2018-10-15
Title
Tajer - Unauthenticated Arbitrary File Upload
Slug
taketin-to-wp-membership
Published
2024-10-14
Title
TAKETIN To WP Membership <= 2.8.16 - Subscriber+ PHP Object Injection
Slug
talkback-secure-linkback-protocol
Published
2024-10-09
Title
Talkback <= 1.0 - Unauthenticated PHP Object Injection
Slug
tallykit
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
tamara-checkout
Published
2025-01-20
Title
Tamara Checkout < 1.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tangible-loops-and-logic
Published
2024-09-26
Title
Loops & Logic < 4.1.5 - Reflected Cross-Site Scripting
Slug
taobaoke
Published
2025-01-16
Title
WordPress 淘宝客插件 <= 1.1.2 - Reflected Cross-Site Scripting
Slug
tapfiliate
Published
2023-02-15
Title
Tapfiliate < 3.0.13 - Admin+ Stored XSS
Slug
tapfiliate
Published
2025-09-22
Title
Tapfiliate <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
target-notifications
Published
2025-01-03
Title
Target Notifications <= 1.1.1 - Reflected Cross-Site Scripting
Slug
targetfirst-wordpress-plugin
Published
2021-05-05
Title
Target First Plugin 2.0 - Unauthenticated Stored XSS via Licence Key