WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
under-construction-maintenance-mode
Published
2026-04-07
Title
Under Construction, Coming Soon & Maintenance Mode < 2.1.2 - Cross-Site Request Forgery
Slug
under-construction-page
Published
2021-01-20
Title
Under Construction < 3.86 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
under-construction-page
Published
2023-02-10
Title
Under Construction < 3.97 - Multiple CSRF
Slug
under-construction-page
Published
2026-07-10
Title
UnderConstructionPage PRO < 5.81 - Subscriber+ Arbitrary File Read via template_thumbnail Parameter
Slug
under-construction-page
Published
2026-09-02
Title
Under Construction < 5.83 - Unauthenticated Stored XSS
Slug
underconstruction
Published
2014-08-01
Title
Under Construction 1.08 - Setting Manipulation CSRF
Slug
underconstruction
Published
2021-08-31
Title
underConstruction < 1.19 - Reflected Cross-Site Scripting
Slug
underconstruction
Published
2022-05-26
Title
underConstruction < 1.21 - Admin+ Stored Cross-Site Scripting
Slug
underconstruction
Published
2022-05-26
Title
underConstruction < 1.20 - Construction Mode Deactivation via CSRF
Slug
underconstruction
Published
2024-03-29
Title
underConstruction < 1.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ungallery
Published
2014-08-01
Title
UnGallery <= 1.5.8 - Local File Disclosure
Slug
ungallery
Published
2014-08-01
Title
UnGallery - Arbitrary Comm& Execution
Slug
ungallery
Published
2024-04-18
Title
Ungallery <= 2.2.4 - Stored XSS via CSRF
Slug
ungapped-widgets
Published
2025-11-10
Title
Ungapped Widgets <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ungrabber
Published
2025-12-31
Title
UnGrabber <= 3.1.3 - Missing Authorization
Slug
uni-woo-custom-product-options
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
uni-woo-custom-product-options
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
uni-woo-custom-product-options-premium
Published
2025-09-22
Title
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) < 4.9.56 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'
Slug
uni-woo-custom-product-options-premium
Published
2026-02-10
Title
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) < 4.9.61 - Missing Authorization to Unauthenticated Arbitrary Attachment and Dropbox File Deletion
Slug
uniconsent-cmp
Published
2023-10-02
Title
UniConsent Cookie Consent CMP for GDPR / CCPA < 1.4.4 - Admin+ Stored XSS
Slug
unify
Published
2025-10-02
Title
Unify < 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode
Slug
unify
Published
2026-01-06
Title
Unify < 3.4.10 - Missing Authorization to Unauthenticated Option Deletion via 'unify_plugin_downgrade' Parameter
Slug
unilevel-mlm-plan
Published
2025-01-06
Title
Unilevel MLM Plan < 2.0.0 - Reflected Cross-Site Scripting via 'page'
Slug
uninstall
Published
2015-02-11
Title
WordPress Uninstall <= 1.2.1 - WordPress Deletion via CSRF
Slug
unipay-payment-gateway-for-woocommerce
Published
2026-10-25
Title
UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Payment Forgery via Empty IPN Secret