WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
twitterpost
Published
2025-01-16
Title
Twitter Post <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
two-factor-authentication
Published
2018-12-18
Title
Two Factor Authentication <= 1.3.12 - Disable Two Factor Authentication CSRF
Slug
two-factor-authentication
Published
2015-04-20
Title
Two Factor Authentication < 1.1.10 - XSS
Slug
two-factor-login-telegram
Published
2024-10-14
Title
WP 2FA with Telegram < 3.1 - Authenticated (Subscriber+) Authentication Bypass
Slug
two-factor-login-telegram
Published
2024-10-14
Title
WP 2FA with Telegram < 3.1 - Two-Factor Authentication Bypass
Slug
twwc-protein
Published
2025-12-11
Title
TWW Protein Calculator <= 1.0.24 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Header' Setting
Slug
tx-onepager
Published
2023-07-20
Title
Onepage Builder <= 2.4.1 - Admin+ SQLi
Slug
typea-ftc-disclosure
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
typea-ftc-disclosure
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
typebot
Published
2021-11-29
Title
Typebot < 1.4.3 - Admin+ Stored Cross Site Scripting
Slug
typebot
Published
2024-07-11
Title
Typebot < 3.6.1 - Contributor+ Stored XSS
Slug
typekit
Published
2025-03-24
Title
Typekit plugin for WordPress <= 1.2.3 - Cross-Site Request Forgery
Slug
typer-core
Published
2025-01-30
Title
Typer Core <= 1.9.6 - Authenticated (Contributor+) Post Disclosure
Slug
types
Published
2015-11-10
Title
Types < 1.8.8 - Cross-Site Scripting (XSS)
Slug
typing-text
Published
2024-06-19
Title
Typing Text < 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
typing-text
Published
2025-01-06
Title
Typing Text <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
typofr
Published
2021-08-13
Title
TypoFR <= 0.11 - Reflected Cross-Site Scripting
Slug
tz-plus-gallery
Published
2025-04-01
Title
TZ PlusGallery <= 1.5.5 - Cross-Site Request Forgery
Slug
tz-plus-gallery
Published
2025-09-22
Title
TZ PlusGallery <= 1.5.5 - Authenticated (Editor+) Stored Cross-Site Scripting