WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ulisting
Published
2025-02-03
Title
uListing < 2.1.7 - Authenticated (Contributor+) SQL Injection
Slug
ulisting
Published
2025-03-14
Title
Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection
Slug
ulisting
Published
2025-03-14
Title
uListing <= 2.1.7 - Subscriber+ Privilege Escalation
Slug
ulisting
Published
2025-04-04
Title
uListing <= 2.2.0 - Admin+ SQL Injection
Slug
ulisting
Published
2025-04-15
Title
uListing <= 2.2.0 - Authenticated (Subscriber+) PHP Object Injection
Slug
ulisting
Published
2026-02-26
Title
Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Editor+) Arbitrary File Download
Slug
ulisting
Published
2025-04-22
Title
uListing <= 2.2.0 - Authenticated (Administrator+) PHP Object Injection
Slug
ulp-duplicate-post-sql-timebased
Published
2025-02-20
Title
Indeed Ultimate Learning Pro < 3.9.1 - Authenticated (Administrator+) SQL Injection via post_id Parameter
Slug
ultimate-410
Published
2024-04-22
Title
Ultimate 410 Gone Status Code < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-accordion
Published
2024-11-08
Title
Ultimate Accordion <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-addons-for-beaver-builder
Published
2020-01-22
Title
Ultimate Addons for Beaver Builder < 1.25.0 - Cross-Site Scripting (XSS)
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-03-29
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-03-29
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widget
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-03-29
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-03-29
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-03-29
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget
Slug
ultimate-addons-for-beaver-builder-lite
Published
2024-08-07
Title
Ultimate Addons for Beaver Builder – Lite < 1.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-addons-for-contact-form-7
Published
2023-06-08
Title
Ultimate Addons for Contact Form 7 < 3.1.24 - Subscriber+ SQL Injection
Slug
ultimate-addons-for-contact-form-7
Published
2023-05-09
Title
Ultimate Addons for Contact Form 7 < 3.1.24 - Unauthenticated SQLi
Slug
ultimate-addons-for-contact-form-7
Published
2023-06-08
Title
Ultimate Addons for Contact Form 7 3.1.23 - Subscriber+ SQLi
Slug
ultimate-addons-for-contact-form-7
Published
2023-07-24
Title
Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSS
Slug
ultimate-addons-for-contact-form-7
Published
2023-07-24
Title
Ultimate Addons for Contact Form 7 < 3.1.29 - Admin+ Stored XSS
Slug
ultimate-addons-for-contact-form-7
Published
2023-08-28
Title
Ultimate Addons for Contact Form 7 < 3.2.1 - Reflected XSS
Slug
ultimate-addons-for-contact-form-7
Published
2023-11-09
Title
Ultimate Addons for Contact Form 7 < 3.2.11 - Missing Authorization
Slug
ultimate-addons-for-contact-form-7
Published
2023-12-04
Title
Ultimate Addons for Contact Form 7 < 3.2.1 - Reflected Cross-Site Scripting