WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
upc-ean-barcode-generator
Published
2025-10-16
Title
UPC/EAN/GTIN Code Generator < 2.0.3 - Cross-Site Request Forgery
Slug
upcasted-s3-offload
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
upcasted-s3-offload
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
upcasted-s3-offload
Published
2025-02-03
Title
Upcasted S3 Offload – AWS S3, Digital Ocean Spaces, Backblaze, Minio and more < 3.0.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
upcoming-events-lists
Published
2025-09-22
Title
Upcoming Events Lists <= 1.4.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
upcoming-for-calendly
Published
2025-12-11
Title
Upcoming for Calendly < 1.2.5 - Cross-Site Request Forgery to Settings Update
Slug
update-alt-attribute
Published
2023-04-19
Title
Update Image Tag Alt Attribute <= 2.4.5 - Reflected XSS
Slug
update-alt-attribute
Published
2023-03-21
Title
Update Image Tag Alt Attribute <= 2.4.5 - Cross-Site Request Forgery
Slug
update-notifications
Published
2024-11-01
Title
UPDATE NOTIFICATIONS <= 0.3.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
update-theme-and-plugins-from-zip-file
Published
2023-07-26
Title
Update ands from Zip File <= 2.0.0 - CSRF
Slug
update-urls
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
updater
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
updownupdown-postcomment-voting
Published
2025-01-16
Title
UpDownUpDown <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
updraft
Published
2015-04-20
Title
UpdraftPlus Backup & Restoration <= 1.9.6.3 - Cross-Site Scripting (XSS)
Slug
updraft
Published
2023-04-24
Title
Updraft <= 0.6.1 - Reflected XSS
Slug
updraftplus
Published
2015-02-03
Title
UpdraftPlus <= 1.9.50 - Privilege Escalation via Nonce Leakage
Slug
updraftplus
Published
2015-04-20
Title
Updraftplus < 1.9.64 - XSS
Slug
updraftplus
Published
2017-08-08
Title
Updraftplus < 1.13.5 - XSS
Slug
updraftplus
Published
2021-12-06
Title
UpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting
Slug
updraftplus
Published
2021-12-28
Title
UpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting
Slug
updraftplus
Published
2021-05-09
Title
UpdraftPlus < 1.6.59 - Admin+ Stored Cross-Site Scripting
Slug
updraftplus
Published
2021-07-12
Title
UpdraftPlus < 1.16.59 - Admin+ Local File Inclusion
Slug
updraftplus
Published
2022-02-17
Title
UpdraftPlus Free < 1.22.3 & Premium < 2.22.3 - Subscriber+ Backup Download
Slug
updraftplus
Published
2022-03-10
Title
UpdraftPlus < 1.22.9 - Reflected Cross-Site Scripting
Slug
updraftplus
Published
2023-05-18
Title
UpdraftPlus < 1.23.4 - CSRF