WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tariffuxx
Published
2025-10-14
Title
TARIFFUXX <= 1.4 - Authenticated (Contributor+) SQL Injection via tariffuxx_configurator Shortcode
Slug
tarteaucitron-wp
Published
2024-10-27
Title
tarteaucitron.js for WordPress < 0.3.0 - Author+ Stored XSS
Slug
tarteaucitron-wp
Published
2024-10-27
Title
tarteaucitron.js for WordPress < 0.3.0 - Stored XSS via CSRF
Slug
tarteaucitronjs
Published
2021-12-09
Title
tarteaucitron.js - Cookies legislation & GDPR < 1.6 - CSRF to Stored Cross-Site Scripting
Slug
tarteaucitronjs
Published
2021-12-17
Title
tarteaucitron.js - Cookies legislation & GDPR < 1.6.1 - Admin + Stored Cross-Site Scripting
Slug
tarteaucitronjs
Published
2025-05-28
Title
tarteaucitron.io < 1.9.5 - Contributor+ Stored XSS
Slug
task-manager
Published
2025-08-29
Title
Task Manager <= 3.0.2 - Unauthenticated Local File Inclusion
Slug
task-manager-pro
Published
2017-07-19
Title
Task Manager Pro < 3.6.34 - Multiple Cross-Site Scripting
Slug
task-manager-pro
Published
2017-07-19
Title
Task Manager Pro < 3.6.34 - Follower+ SQLi
Slug
task-scheduler
Published
2022-03-01
Title
Folders Disclosure via Outdated jQueryFileTree Library
Slug
task-scheduler
Published
2025-04-09
Title
Task Scheduler <= 1.6.3 - Reflected Cross-Site Scripting
Slug
task-scheduler
Published
2025-10-14
Title
Task Scheduler <= 1.6.3 - Authenticated (Admin+) Blind Server-Side Request Forgery
Slug
taskbot
Published
2025-09-30
Title
Taskbot < 6.5 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
taskbuilder
Published
2022-09-15
Title
TaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file upload
Slug
taskbuilder
Published
2024-10-31
Title
Taskbuilder < 3.0.5 - Admin+ SQL Injection
Slug
taskbuilder
Published
2025-01-03
Title
Taskbuilder – WordPress Project & Task Management plugin < 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppm_tasks Shortcode
Slug
taskbuilder
Published
2025-01-15
Title
Taskbuilder < 3.0.7 - Authenticated (Subscriber+) SQL Injection
Slug
taskbuilder
Published
2024-09-18
Title
Taskbuilder < 3.0.9 - Admin+ SQL Injection
Slug
taskbuilder
Published
2025-04-17
Title
Taskbuilder < 4.0.2 - Authenticated (Subscriber+) SQL Injection
Slug
taskbuilder
Published
2025-06-05
Title
Taskbuilder < 4.0.8 - Missing Authorization
Slug
taskbuilder
Published
2026-01-06
Title
Taskbuilder < 5.0.0 - Reflected Cross-Site Scripting
Slug
tasty-recipes-lite
Published
2025-12-31
Title
Tasty Recipes Lite < 1.1.6 - Missing Authorization
Slug
tasty-recipes-lite
Published
2025-12-31
Title
Tasty Recipes Lite < 1.1.6 - Missing Authorization
Slug
tatsu
Published
2022-03-28
Title
Tatsu < 3.3.12 - Unauthenticated RCE
Slug
tawkto-live-chat
Published
2021-11-08
Title
Tawk.to Live Chat < 0.6.0 - Subscriber+ Visitor Monitoring & Chat Removal