WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-addons-for-beaver-builder
Published
2020-01-22
Title
Ultimate Addons for Beaver Builder < 1.25.0 - Cross-Site Scripting (XSS)
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-03-29
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-03-29
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widget
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-03-29
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-03-29
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-03-29
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-08-07
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-addons-for-contact-form-7
Published
2023-06-08
Title
Ultimate Addons for Contact Form 7 < 3.1.24 - Subscriber+ SQL Injection
Slug
ultimate-addons-for-contact-form-7
Published
2023-05-09
Title
Ultimate Addons for Contact Form 7 < 3.1.24 - Unauthenticated SQLi
Slug
ultimate-addons-for-contact-form-7
Published
2023-06-08
Title
Ultimate Addons for Contact Form 7 3.1.23 - Subscriber+ SQLi
Slug
ultimate-addons-for-contact-form-7
Published
2023-07-24
Title
Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSS
Slug
ultimate-addons-for-contact-form-7
Published
2023-07-24
Title
Ultimate Addons for Contact Form 7 < 3.1.29 - Admin+ Stored XSS
Slug
ultimate-addons-for-contact-form-7
Published
2023-08-28
Title
Ultimate Addons for Contact Form 7 < 3.2.1 - Reflected XSS
Slug
ultimate-addons-for-contact-form-7
Published
2023-11-09
Title
Ultimate Addons for Contact Form 7 < 3.2.11 - Missing Authorization
Slug
ultimate-addons-for-contact-form-7
Published
2023-12-04
Title
Ultimate Addons for Contact Form 7 < 3.2.1 - Reflected Cross-Site Scripting
Slug
ultimate-addons-for-contact-form-7
Published
2025-06-17
Title
Ultimate Addons for Contact Form 7 < 3.5.13 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'
Slug
ultimate-addons-for-contact-form-7
Published
2025-06-25
Title
Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module
Slug
ultimate-addons-for-contact-form-7
Published
2025-06-30
Title
Ultra Addons for Contact Form 7 < 3.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode
Slug
ultimate-addons-for-contact-form-7
Published
2025-12-11
Title
Ultra Addons for Contact Form 7 < 3.5.34 - Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDF
Slug
ultimate-addons-for-elementor
Published
2024-04-15
Title
Mega Addons For Elementor < 1.9 - Missing Authorization
Slug
ultimate-addons-for-elementor
Published
2024-08-12
Title
Mega Addons For Elementor <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-addons-for-gutenberg
Published
2020-04-08
Title
Gutenberg Blocks - Ultimate Addons for Gutenberg < 1.14.8 - Authenticated Settings Change
Slug
ultimate-addons-for-gutenberg
Published
2022-05-31
Title
Spectra < 1.25.6 - Reflected Cross-Site Scripting
Slug
ultimate-addons-for-gutenberg
Published
2023-01-24
Title
Spectra < 1.15.0 - Contributor+ Stored Cross-Side Scripting
Slug
ultimate-addons-for-gutenberg
Published
2023-12-05
Title
Spectra < 2.7.10 - Contributor+ Stored XSS