WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
twitter-bootstrap-collapse-aka-accordian-shortcode
Published
2025-01-14
Title
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
twitter-card-generator
Published
2025-04-24
Title
Twitter Card Generator <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
twitter-cards-meta
Published
2017-04-06
Title
Twitter Cards Meta < 2.5.0 - CSRF and XSS
Slug
twitter-feeds
Published
2026-03-20
Title
Twitter Feeds <= 1.0.0 - Authenticated (Contributor+) Cross-Site Scripting via 'tweet_title' Shortcode Attribute
Slug
twitter-follow
Published
2024-11-22
Title
Twitter Follow Button < 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter
Slug
twitter-friends-widget
Published
2021-09-08
Title
Twitter Friends Widget <= 3.1 - Reflected Cross-Site Scripting
Slug
twitter-liveblog
Published
2014-12-18
Title
Twitter Liveblog <= 1.1.2 - Multiple CSRF
Slug
twitter-news-feed
Published
2025-01-16
Title
Twitter News Feed <= 1.1.1 - Reflected Cross-Site Scripting
Slug
twitter-plugin
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
twitter-posts
Published
2023-11-13
Title
TwitterPosts <= 1.0.2 - Settings Update via CSRF
Slug
twitter-posts-to-blog
Published
2026-02-10
Title
Twitter posts to Blog <= 1.11.25 - Missing Authorization to Unauthenticated Plugin Settings Update
Slug
twitter-real-time-search-scrolling
Published
2024-11-04
Title
Twitter real time search scrolling <= 7.0 - Reflected Cross-Site Scripting
Slug
twitter-shortcode
Published
2025-01-16
Title
Twitter Shortcode <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
twitterdash
Published
2014-12-31
Title
twitterDash 2.1 - CSRF & XSS
Slug
twitterpost
Published
2025-01-16
Title
Twitter Post <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
two-factor-2fa-via-email
Published
2026-02-18
Title
Two Factor (2FA) Authentication via Email < 1.9.9 - Two-Factor Authentication Bypass via token
Slug
two-factor-authentication
Published
2018-12-18
Title
Two Factor Authentication <= 1.3.12 - Disable Two Factor Authentication CSRF
Slug
two-factor-authentication
Published
2015-04-20
Title
Two Factor Authentication < 1.1.10 - XSS
Slug
two-factor-login-telegram
Published
2024-10-14
Title
WP 2FA with Telegram < 3.1 - Authenticated (Subscriber+) Authentication Bypass
Slug
two-factor-login-telegram
Published
2024-10-14
Title
WP 2FA with Telegram < 3.1 - Two-Factor Authentication Bypass
Slug
twwc-protein
Published
2025-12-11
Title
TWW Protein Calculator <= 1.0.24 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Header' Setting
Slug
tx-onepager
Published
2023-07-20
Title
Onepage Builder <= 2.4.1 - Admin+ SQLi
Slug
typea-ftc-disclosure
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
typea-ftc-disclosure
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
typebot
Published
2021-11-29
Title
Typebot < 1.4.3 - Admin+ Stored Cross Site Scripting