WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tb-testimonials
Published
2025-03-12
Title
TBTestimonials <= 1.7.3 - Reflected Cross-Site Scripting
Slug
tc-custom-javascript
Published
2020-07-21
Title
TC Custom JavaScript < 1.2.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
tc-ecommerce
Published
2025-01-06
Title
Themes Coder – Create Android & iOS Apps For Your Woocommerce Site < 1.4.0 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation
Slug
tc-ecommerce
Published
2025-01-27
Title
Themes Coder < 1.4.0 - Unauthenticated SQLi
Slug
tc-logo-slider
Published
2025-12-31
Title
Logo Slider , Logo Carousel , Logo showcase , Client Logo <= 1.8.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
tc-testimonial
Published
2025-08-19
Title
TC Testimonials <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tcbd-auto-refresher
Published
2025-01-10
Title
TCBD Auto Refresher <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tcbd-popover
Published
2024-12-13
Title
TCBD Popover <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tcbd-tooltip
Published
2025-02-20
Title
TCBD Tooltip <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tcd-google-maps
Published
2023-10-22
Title
TCD Google Maps <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
tcs3
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
td-cloud-library
Published
2023-06-19
Title
tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation
Slug
td-cloud-library
Published
2025-10-16
Title
tagDiv Cloud Library < 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
td-composer
Published
2022-10-24
Title
tagDiv Composer < 3.5 - Unauthenticated Account Takeover
Slug
td-composer
Published
2023-04-24
Title
tagDiv Composer < 4.0 - Reflected Cross-site Scripting
Slug
td-composer
Published
2023-08-17
Title
tagDiv Composer < 4.2 - Unauthenticated Stored XSS
Slug
td-composer
Published
2023-08-17
Title
tagDiv Composer < 4.2 - Admin+ Stored XSS
Slug
td-composer
Published
2024-06-03
Title
tagDiv Composer < 4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
Slug
td-composer
Published
2024-04-18
Title
tagDiv Composer < 4.9 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
Slug
td-composer
Published
2024-04-18
Title
tagDiv Composer < 4.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Slug
td-composer
Published
2024-08-30
Title
tagDiv Composer < 5.1 - Reflected Cross-Site Scripting via envato_code[]
Slug
td-composer
Published
2024-08-30
Title
tagDiv Composer < 5.1 - Reflected Cross-Site Scripting via envato_code[]
Slug
td-composer
Published
2025-03-27
Title
tagDiv Composer < 5.4 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'
Slug
td-composer
Published
2025-03-27
Title
tagDiv Composer < 5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
td-composer
Published
2025-04-03
Title
TagDiv Composer < 5.4 - Unauthenticated Arbitrary PHP Object Instantiation