WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
td-composer
Published
2025-05-01
Title
tagDiv Composer < 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
td-composer
Published
2025-05-07
Title
tagDiv Composer < 5.4 - Reflected Cross-Site Scripting via 'data'
Slug
td-composer
Published
2025-10-16
Title
tagDiv Composer < 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
td-composer
Published
2025-10-09
Title
tagDiv Composer < 5.4.2 - Unauthenticated Stored Cross-Site Scripting
Slug
td-composer
Published
2026-01-08
Title
tagDiv Composer < 5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
td-composer
Published
2026-03-10
Title
tagDiv Composer < 5.4.3 - Reflected Cross-Site Scripting
Slug
td-composer
Published
2026-02-24
Title
tagDiv Composer <= 5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
td-composer
Published
2026-03-02
Title
tagDiv Composer <= 5.4.3 - Unauthenticated Arbitrary Shortcode Execution
Slug
td-subscription
Published
2024-08-16
Title
tagDiv Opt-In Builder < 1.5 - Authenticated (Admin+) SQL Injection
Slug
td-subscription
Published
2024-08-16
Title
tagDiv Opt-In Builder < 1.5 - Authenticated (Admin+) SQL Injection
Slug
td-subscription
Published
2025-04-29
Title
tagDiv Opt-In Builder < 1.7.1 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter
Slug
td-subscription
Published
2026-03-16
Title
tagDiv Opt-In Builder < 1.7.4 - Reflected Cross-Site Scripting
Slug
tdo-mini-forms
Published
2014-08-01
Title
TDO Mini Forms 0.13.9 - tdomf-upload-inline.php File Upload Remote Code Execution
Slug
teachpress
Published
2023-01-17
Title
teachPress < 8.1.9 - Reflected Cross-Site Scripting
Slug
teachpress
Published
2023-06-22
Title
teachPress < 9.0.3 - Reflected Cross-Site Scripting
Slug
teachpress
Published
2023-11-28
Title
teachPress < 9.0.6 - Cross-Site Request Forgery via delete_database()
Slug
teachpress
Published
2023-11-27
Title
teachPress < 9.0.5 - Cross-Site Request Forgery
Slug
teachpress
Published
2025-03-03
Title
teachPress < 9.0.8 - Authenticated (Contributor+) SQL Injection
Slug
teachpress
Published
2025-03-24
Title
teachPress < 9.0.10 - Cross-Site Request Forgery to Import Delete
Slug
teachpress
Published
2025-04-04
Title
teachPress < 9.0.12 - Authenticated (Contributor+) SQL Injection
Slug
teachpress
Published
2026-01-06
Title
teachPress < 9.0.13 - Cross-Site Request Forgery
Slug
teachpress
Published
2025-12-30
Title
teachPress < 9.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tealium
Published
2025-06-19
Title
Tealium < 2.1.21 - Admin+ Stored XSS
Slug
team
Published
2020-10-05
Title
Post Grid < 2.0.73 & Team Showcase < 1.22.16 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
team
Published
2020-10-05
Title
Post Grid < 2.0.73 & Team Showcase < 1.22.16 - PHP Object Injection