WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
universal-google-adsense-and-ads-manager
Published
2026-01-14
Title
Universal Google Adsense and Ads manager <= 1.1.8 - Missing Authorization
Slug
universal-star-rating
Published
2022-01-13
Title
Universal Star Rating <= 2.1.0 - CSRF
Slug
universal-video-player
Published
2025-12-31
Title
Universal Video Player <= 3.8.4 - Reflected Cross-Site Scripting
Slug
universal-video-player
Published
2025-12-30
Title
Universal Video Player <= 3.8.4 - Reflected Cross-Site Scripting
Slug
universal-video-player-and-bg
Published
2025-05-16
Title
Video Player & FullScreen Video Background <= 2.4.1 - Authenticated (Administrator+) SQL Injection
Slug
universal_video_player
Published
2025-06-05
Title
Universal Video Player <= 3.8.3 - Reflected Cross-Site Scripting
Slug
universam-demo
Published
2024-12-11
Title
UNIVERSAM < 8.59 - Reflected Cross-Site Scripting
Slug
universam-demo
Published
2025-07-06
Title
UNIVERSAM <= 8.72.34 - Unauthenticated PHP Object Injection
Slug
university-quizzes-online
Published
2025-01-16
Title
University quizzes online <= 1.4 - Reflected Cross-Site Scripting
Slug
unlimited-addon-for-elementor
Published
2024-10-14
Title
Unlimited Addon For Elementor <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
unlimited-addons-for-wpbakery-page-builder
Published
2024-01-17
Title
Unlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Upload
Slug
unlimited-blocks
Published
2024-09-16
Title
Gutenberg Blocks <= 1.2.8 - Contributor+ Stored XSS
Slug
unlimited-elements-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
unlimited-elements-for-elementor
Published
2023-01-27
Title
Unlimited Elements For Elementor < 1.5.49 - Admin+ Stored XSS
Slug
unlimited-elements-for-elementor
Published
2023-06-16
Title
Unlimited Elements For Elementor < 1.5.67 - Contributor+ Arbitrary File Upload
Slug
unlimited-elements-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2024-03-29
Title
Unlimited Elements For Elementor < 1.5.97 - Contributor+ Stored XSS
Slug
unlimited-elements-for-elementor
Published
2024-03-25
Title
Unlimited Elements For Elementor < 1.5.94 - Reflected Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2024-05-09
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.103 - Reflected Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2024-05-09
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.103 - Admin+ Command Injection
Slug
unlimited-elements-for-elementor
Published
2024-05-10
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.105 - Contributor+ SQL Injection
Slug
unlimited-elements-for-elementor
Published
2024-05-22
Title
Unlimited Elements for Elementor < 1.5.108 - Contributor+ SQLi
Slug
unlimited-elements-for-elementor
Published
2024-05-28
Title
Unlimited Elements for Elementor < 1.5.91 - Contributor+ Remote Code Execution via template import
Slug
unlimited-elements-for-elementor
Published
2024-05-29
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.108 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field
Slug
unlimited-elements-for-elementor
Published
2024-06-05
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.110 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter