WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
u-design-core
Published
2025-10-16
Title
UDesign Core < 4.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
u-design-core
Published
2025-09-06
Title
UDesign Core <= 4.14.0 - Missing Authorization
Slug
u-design-core
Published
2025-09-06
Title
UDesign Core <= 4.14.0 - Reflected Cross-Site Scripting
Slug
u-design-core
Published
2025-10-15
Title
UDesign Core <= 4.14.0 - Authenticated (Contributor+) Local File Inclusion
Slug
ua-marketplace
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ua-marketplace
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
uber-classic
Published
2025-05-16
Title
UberSlider <= 2.3 - Authenticated (Contributor+) SQL Injection
Slug
uber-grid
Published
2024-10-15
Title
WordPress Portfolio Builder – Portfolio Gallery <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
uber-grid
Published
2024-11-28
Title
WordPress Portfolio Builder – Portfolio Gallery <= 1.1.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
uber-grid
Published
2025-02-18
Title
WordPress Portfolio Builder – Portfolio Gallery <= 1.1.7 - Missing Authorization to Unauthenticated Portfolio Update
Slug
uber-grid
Published
2025-02-18
Title
WordPress Portfolio Builder – Portfolio Gallery <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ubermenu
Published
2024-05-20
Title
Uber Menu < 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
ubermenu
Published
2024-06-21
Title
UberMenu < 3.8.4 - Cross-Site Request Forgery to Settings Reset
Slug
ubigeo-peru
Published
2022-04-18
Title
Ubigeo de Peru < 3.6.4 - Unauthenticated SQLi
Slug
ucan-post
Published
2014-08-01
Title
uCan Post <= 1.0.09 - Stored XSS
Slug
ucat-next-story
Published
2024-10-21
Title
uCAT – Next Story <= 2.0.0 - Reflected Cross-Site Scripting
Slug
ucontext
Published
2022-08-02
Title
uContext for Clickbank <= 3.9.1 - Stored Cross-Site Scripting via CSRF
Slug
ucontext-for-amazon
Published
2022-08-02
Title
uContext for Amazon <= 3.9.1 - Stored Cross-Site Scripting via CSRF
Slug
udraw
Published
2022-03-29
Title
uDraw < 3.3.3 - Unauthenticated Arbitrary File Access
Slug
ui-slider-filter-by-price
Published
2024-12-12
Title
Ui Slider Filter By Price <= 1.1 - Cross-Site Request Forgery
Slug
ui-slider-filter-by-price
Published
2025-01-16
Title
Ui Slider Filter By Price <= 1.1 - Reflected Cross-Site Scripting
Slug
uichemy
Published
2025-10-16
Title
UiChemy < 4.0.1 - Missing Authorization
Slug
uicore-elements
Published
2025-04-22
Title
UiCore Elements – Free Elementor widgets and templates < 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
uicore-elements
Published
2025-08-11
Title
UiCore Elements < 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Read
Slug
uicore-elements
Published
2025-08-27
Title
UiCore Elements < 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting