WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
uncanny-automator-pro
Published
2024-06-28
Title
Uncanny Automator Pro < 5.3.0.1 - Cross-Site Request Forgery to License Setting Reset
Slug
uncanny-automator-pro
Published
2024-07-11
Title
Uncanny Automator Pro < 5.3.0.1 - Reflected Cross-Site Scripting
Slug
uncanny-learndash-groups
Published
2024-09-24
Title
Uncanny Groups for LearnDash < 6.1.1 - Authenticated (Group Leader+) Privilege Escalation
Slug
uncanny-learndash-groups
Published
2024-09-24
Title
Uncanny Groups for LearnDash < 6.1.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add
Slug
uncanny-learndash-toolkit
Published
2023-01-27
Title
Uncanny Toolkit for LearnDash < 3.6.4.2 - Cross-Site Request Forgery (CSRF)
Slug
uncanny-learndash-toolkit
Published
2025-04-11
Title
Uncanny Toolkit for LearnDash < 3.7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
uncanny-learndash-toolkit
Published
2025-05-16
Title
Uncanny Toolkit for LearnDash < 3.7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
uncanny-learndash-toolkit
Published
2025-09-22
Title
Uncanny Toolkit for LearnDash < 3.7.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
uncanny-toolkit-pro
Published
2024-06-28
Title
Uncanny Toolkit Pro for LearnDash < 4.1.4.1 - Missing Authorization to Arbitrary Page/Post Duplication
Slug
uncanny-toolkit-pro
Published
2024-06-28
Title
Uncanny Toolkit Pro for LearnDash < 4.1.4.1 - Cross-Site Request Forgery
Slug
uncanny-toolkit-pro
Published
2024-06-28
Title
Uncanny Toolkit Pro for LearnDash < 4.1.4.1 - Reflected Cross-Site Scripting
Slug
uncode-core
Published
2023-12-21
Title
Uncode Core < 2.8.7 - Reflected Cross-Site Scripting
Slug
uncode-core
Published
2023-12-21
Title
Uncode Core < 2.8.9 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
uncode-core
Published
2023-12-21
Title
Uncode Core < 2.8.9 - Privilege Escalation
Slug
uncode-core
Published
2025-02-17
Title
Uncode Core < 2.9.1.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias
Slug
uncode-core
Published
2025-07-03
Title
Uncode Core < 2.9.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Slug
uncomplicated-seo
Published
2025-02-02
Title
Uncomplicated SEO <= 1.2 - Reflected Cross-Site Scripting
Slug
unconfirmed
Published
2014-08-01
Title
Unconfirmed <= 1.2.4 - unconfirmed.php s Parameter Reflected XSS
Slug
under-construction-maintenance-mode
Published
2021-02-27
Title
Under Construction, Coming Soon & Maintenance Mode < 1.1.2 - Reflected Cross-Site Scripting (XSS)
Slug
under-construction-maintenance-mode
Published
2021-02-27
Title
Under Construction, Coming Soon & Maintenance Mode < 1.1.2 - Server Side Request Forgery (SSRF)
Slug
under-construction-page
Published
2021-01-20
Title
Under Construction < 3.86 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
under-construction-page
Published
2023-02-10
Title
Under Construction < 3.97 - Multiple CSRF
Slug
underconstruction
Published
2014-08-01
Title
Under Construction 1.08 - Setting Manipulation CSRF
Slug
underconstruction
Published
2021-08-31
Title
underConstruction < 1.19 - Reflected Cross-Site Scripting
Slug
underconstruction
Published
2022-05-26
Title
underConstruction < 1.21 - Admin+ Stored Cross-Site Scripting