WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ut-demo-importer
Published
2025-04-09
Title
Ultra Demo Importer <= 1.0.5 - Cross-Site Request Forgery to Remote Code Execution
Slug
ut-elementor-addons-lite
Published
2025-02-27
Title
Ultra Addons Lite for Elementor < 1.1.9 - Authenticated (Contributor+) Restricted Post Disclosure
Slug
ut-elementor-addons-lite
Published
2025-04-04
Title
Ultra Addons Lite for Elementor < 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ut-elementor-addons-lite
Published
2025-10-02
Title
Ultra Addons Lite for Elementor < 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Field
Slug
ut-shortcodes
Published
2024-06-20
Title
Shortcodes by United Themes < 5.0.5 - Reflected Cross-Site Scripting
Slug
ut-shortcodes
Published
2025-03-28
Title
Shortcodes by United Themes < 5.1.7 - Unauthenticated Arbitrary Shortcode Execution
Slug
utech-spinning-earth
Published
2024-11-08
Title
Utech Spinning Earth <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
utech-world-time-for-wp
Published
2024-12-14
Title
Utech World Time <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
utilities-for-mtg
Published
2025-01-17
Title
Utilities for MTG <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
utilitify
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
utilitify
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
utm-tracker
Published
2023-05-24
Title
UTM Tracker <= 1.3.1 - Admin+ Stored XSS
Slug
utubevideo-gallery
Published
2023-01-17
Title
uTubeVideo Gallery < 2.0.8 - Contributor+ Stored XSS
Slug
utw-importer
Published
2025-08-28
Title
Ultimate Tag Warrior Importer <= 0.2 - Cross-Site Request Forgery
Slug
uw-freelancer
Published
2024-11-04
Title
UW Freelancer <= 0.1 - Reflected Cross-Site Scripting
Slug
ux-flat
Published
2024-03-19
Title
UX Flat < 4.5 - Contributor+ Stored XSS
Slug
ux-flat
Published
2026-01-20
Title
UX Flat <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ux-sniff
Published
2025-04-10
Title
UXsniff <= 1.2.8 - Reflected Cross-Site Scripting