WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
uncanny-toolkit-pro
Published
2024-06-28
Title
Uncanny Toolkit Pro for LearnDash < 4.1.4.1 - Cross-Site Request Forgery
Slug
uncanny-toolkit-pro
Published
2024-06-28
Title
Uncanny Toolkit Pro for LearnDash < 4.1.4.1 - Reflected Cross-Site Scripting
Slug
uncode-core
Published
2023-12-21
Title
Uncode Core < 2.8.7 - Reflected Cross-Site Scripting
Slug
uncode-core
Published
2023-12-21
Title
Uncode Core < 2.8.9 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
uncode-core
Published
2023-12-21
Title
Uncode Core < 2.8.9 - Privilege Escalation
Slug
uncode-core
Published
2025-02-17
Title
Uncode Core < 2.9.1.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias
Slug
uncode-core
Published
2025-07-03
Title
Uncode Core < 2.9.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Slug
uncomplicated-seo
Published
2025-02-02
Title
Uncomplicated SEO <= 1.2 - Reflected Cross-Site Scripting
Slug
unconfirmed
Published
2014-08-01
Title
Unconfirmed <= 1.2.4 - unconfirmed.php s Parameter Reflected XSS
Slug
under-construction-maintenance-mode
Published
2021-02-27
Title
Under Construction, Coming Soon & Maintenance Mode < 1.1.2 - Reflected Cross-Site Scripting (XSS)
Slug
under-construction-maintenance-mode
Published
2021-02-27
Title
Under Construction, Coming Soon & Maintenance Mode < 1.1.2 - Server Side Request Forgery (SSRF)
Slug
under-construction-page
Published
2021-01-20
Title
Under Construction < 3.86 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
under-construction-page
Published
2023-02-10
Title
Under Construction < 3.97 - Multiple CSRF
Slug
underconstruction
Published
2014-08-01
Title
Under Construction 1.08 - Setting Manipulation CSRF
Slug
underconstruction
Published
2021-08-31
Title
underConstruction < 1.19 - Reflected Cross-Site Scripting
Slug
underconstruction
Published
2022-05-26
Title
underConstruction < 1.21 - Admin+ Stored Cross-Site Scripting
Slug
underconstruction
Published
2022-05-26
Title
underConstruction < 1.20 - Construction Mode Deactivation via CSRF
Slug
underconstruction
Published
2024-03-29
Title
underConstruction < 1.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ungallery
Published
2014-08-01
Title
UnGallery <= 1.5.8 - Local File Disclosure
Slug
ungallery
Published
2014-08-01
Title
UnGallery - Arbitrary Comm& Execution
Slug
ungallery
Published
2024-04-18
Title
Ungallery <= 2.2.4 - Stored XSS via CSRF
Slug
ungapped-widgets
Published
2025-11-10
Title
Ungapped Widgets <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ungrabber
Published
2025-12-31
Title
UnGrabber <= 3.1.3 - Missing Authorization
Slug
uni-woo-custom-product-options
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
uni-woo-custom-product-options
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting