WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tranzly
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
trash-duplicate-and-301-redirect
Published
2025-02-18
Title
Trash Duplicate and 301 Redirect < 1.9.1 - Unauthenticated Arbitrary Post Deletion
Slug
trash-duplicate-and-301-redirect
Published
2025-12-31
Title
Trash Duplicate and 301 Redirect <= 1.9.1 - Missing Authorization
Slug
travel-light
Published
2021-07-05
Title
Travel Light <= 1.0 - CSRF Bypass
Slug
traveler-code
Published
2025-01-31
Title
Traveler Code < 3.1.2 - Authenticated (Subscriber+) SQL Injection
Slug
traveler-code
Published
2025-01-31
Title
Traveler Code < 3.1.2 - Unauthenticated Arbitrary SQL Injection
Slug
traveler-layout-essential-for-elementor
Published
2025-01-31
Title
Traveler Layout Essential For Elementor < 1.4 - Unauthenticated Server-Side Request Forgery
Slug
travelers-map
Published
2024-03-25
Title
Travelers' Map < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
travelers-map
Published
2025-11-09
Title
Travelers' Map < 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
travelfic-toolkit
Published
2025-04-16
Title
Travelfic Toolkit < 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
travelfic-toolkit
Published
2025-11-26
Title
Travelfic Toolkit < 1.3.4 - Missing Authorization
Slug
travelmap-blog
Published
2025-09-22
Title
Travel Map < 1.0.4 - Cross-Site Request Forgery
Slug
travelpayouts
Published
2021-09-13
Title
Travelpayouts < 1.0.17 - CSRF Bypass due to Outdated Redux Framework
Slug
travelpayouts
Published
2024-01-23
Title
Travelpayouts < 1.1.14 - Reflected XSS
Slug
travelpayouts
Published
2024-01-26
Title
Travelpayouts < 1.1.13 - Settings Update via CSRF
Slug
travelpayouts
Published
2024-02-28
Title
Travelpayouts < 1.1.17 - Open Redirect
Slug
travelpayouts
Published
2026-01-29
Title
Travelpayouts <= 1.2.1 - Missing Authorization
Slug
tree-website-map
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via CSRF
Slug
tree-website-map
Published
2021-04-22
Title
Multiple WP-Buy Plugins - Arbitrary Plugin Installation/Activation via Low Privilege User
Slug
treepress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
treepress
Published
2023-03-20
Title
TreePress – Easy Family Trees & Ancestor Profiles < 3.0.0 - Admin+ Stored Cross-Site Scripting
Slug
treepress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
trendy-restaurant-menu
Published
2024-11-08
Title
Trendy Restaurant Menu <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
triberr-wordpress-plugin
Published
2023-10-18
Title
Triberr < 4.1.2 - Admin+ Stored XSS
Slug
tribute-testimonial-gridslider
Published
2024-11-22
Title
Tribute Testimonials – WordPress Testimonial Grid/Slider <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting