WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
torro-forms
Published
2022-09-02
Title
Torro Forms <= 1.0.16 - Contributor+ Stored Cross-Site Scripting
Slug
total-cost-input-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
total-donations
Published
2019-01-25
Title
Total Donations - Update Arbitrary WordPress Option Values
Slug
total-donations
Published
2025-04-29
Title
Total Donations <= 3.0.8 - Unauthenticated Stored Cross-Site Scripting
Slug
total-gdpr-compliance-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
total-sales-for-woocommerce
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
total-security
Published
2016-07-25
Title
Total Security < 3.4.1 - XSS & Settings Change
Slug
total-team-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
totalcontest-lite
Published
2025-02-03
Title
Total Contest Lite < 2.9.0 - Reflected XSS
Slug
totalcontest-lite
Published
2026-03-10
Title
Photo Contest | Competition | Video Contest <= 2.9.1 - Authenticated (Author+) PHP Object Injection
Slug
totaldonations
Published
2026-08-19
Title
Total Donations <= 2.0.5 - Unauthenticated SQL Injection
Slug
totaldonations
Published
2026-08-19
Title
Total Donations <= 2.0.5 - Unauthenticated Privilege Escalation
Slug
totalpoll-lite
Published
2024-04-22
Title
Total Poll Lite < 4.10.0 - Missing Authorization
Slug
totalpoll-lite
Published
2026-03-16
Title
TotalPoll for Polls and Contests <= 4.12.0 - Authenticated (Contributor+) Remote Code Execution
Slug
totalpoll-lite
Published
2026-02-15
Title
Total Poll Lite <= 4.12.0 - Missing Authorization
Slug
totalprocessing-card-payments
Published
2025-04-07
Title
Nomupay Payment Processing Gateway < 7.1.6 - Authenticated (Subscriber+) Arbitrary File Download
Slug
totalprocessing-card-payments
Published
2025-04-14
Title
Nomupay Payment Processing Gateway < 7.1.7 - Reflected Cross-Site Scripting
Slug
totalprocessing-card-payments
Published
2025-05-02
Title
Nomupay Payment Processing Gateway < 7.1.8 - Shop Manager+ Arbitrary File Download
Slug
totalprocessing-card-payments
Published
2026-08-27
Title
Total Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential Disclosure
Slug
totop-link
Published
2021-11-15
Title
ToTop Link <= 1.7.1 - Unauthenticated PHP Object Injection
Slug
tour-booking-manager
Published
2024-04-12
Title
WpTravelly < 1.6.1 - Cross-Site Request Forgery
Slug
tour-booking-manager
Published
2024-05-28
Title
WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly < 1.7.2 - Missing Authorization via ttbm_new_place_save
Slug
tour-booking-manager
Published
2024-08-09
Title
WpTravelly < 1.7.8 - Missing Authorization
Slug
tour-booking-manager
Published
2025-01-14
Title
WpTravelly < 1.8.6 - Missing Authorization
Slug
tour-booking-manager
Published
2025-03-27
Title
WpTravelly < 1.8.8 - Authenticated (Contributor+) Local File Inclusion