WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-addons-for-contact-form-7
Published
2025-06-17
Title
Ultimate Addons for Contact Form 7 < 3.5.13 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'
Slug
ultimate-addons-for-contact-form-7
Published
2025-06-25
Title
Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module
Slug
ultimate-addons-for-contact-form-7
Published
2025-06-30
Title
Ultra Addons for Contact Form 7 < 3.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode
Slug
ultimate-addons-for-contact-form-7
Published
2025-12-11
Title
Ultra Addons for Contact Form 7 < 3.5.34 - Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDF
Slug
ultimate-addons-for-contact-form-7
Published
2025-12-13
Title
Ultimate Addons for Contact Form 7 < 3.5.35 - Missing Authorization
Slug
ultimate-addons-for-contact-form-7
Published
2026-03-14
Title
Ultra Addons for Contact Form 7 < 3.5.37 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-addons-for-elementor
Published
2024-04-15
Title
Mega Addons For Elementor < 1.9 - Missing Authorization
Slug
ultimate-addons-for-elementor
Published
2024-08-12
Title
Mega Addons For Elementor <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-addons-for-gutenberg
Published
2020-04-08
Title
Gutenberg Blocks - Ultimate Addons for Gutenberg < 1.14.8 - Authenticated Settings Change
Slug
ultimate-addons-for-gutenberg
Published
2022-05-31
Title
Spectra < 1.25.6 - Reflected Cross-Site Scripting
Slug
ultimate-addons-for-gutenberg
Published
2023-01-24
Title
Spectra < 1.15.0 - Contributor+ Stored Cross-Side Scripting
Slug
ultimate-addons-for-gutenberg
Published
2023-12-05
Title
Spectra < 2.7.10 - Contributor+ Stored XSS
Slug
ultimate-addons-for-gutenberg
Published
2024-04-03
Title
Spectra – WordPress Gutenberg Blocks < 2.10.4 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS
Slug
ultimate-addons-for-gutenberg
Published
2024-04-26
Title
Spectra – WordPress Gutenberg Blocks < 2.12.7 - Contributor+ Path Traversal
Slug
ultimate-addons-for-gutenberg
Published
2024-05-22
Title
Spectra – WordPress Gutenberg Blocks < 2.12.9 - Contributor+ Stored XSS via Testimonial Block
Slug
ultimate-addons-for-gutenberg
Published
2024-05-22
Title
Spectra – WordPress Gutenberg Blocks < 2.12.9 - Contributor+ Stored XSS via Image Gallery Block
Slug
ultimate-addons-for-gutenberg
Published
2024-05-23
Title
Spectra < 2.13.1 - Author+ Stored XSS
Slug
ultimate-addons-for-gutenberg
Published
2024-07-05
Title
Spectra < 2.13.8 - Missing Authorization via generate_ai_content
Slug
ultimate-addons-for-gutenberg
Published
2024-08-07
Title
Spectra – WordPress Gutenberg Blocks < 2.15.1 - Authenticated (Contributor+) Stored Cross-site Scripting
Slug
ultimate-addons-for-gutenberg
Published
2024-12-02
Title
Spectra – WordPress Gutenberg Blocks < 2.16.3 - Contributor+ Stored XSS via Team Widget
Slug
ultimate-addons-for-gutenberg
Published
2025-03-25
Title
Spectra < 2.19.1 - Contributor+ Stored XSS
Slug
ultimate-addons-for-gutenberg
Published
2025-11-04
Title
Spectra < 2.19.15 - Contributor+ Stored XSS via Custom CSS
Slug
ultimate-addons-for-gutenberg
Published
2026-02-02
Title
Spectra Gutenberg Blocks < 2.19.18 - Unauthenticated Information Disclosure in Sensitive Data
Slug
ultimate-addons-for-gutenberg
Published
2026-01-17
Title
Spectra < 2.19.18 - Missing Authorization
Slug
ultimate-ajax-login
Published
2025-09-05
Title
Ultimate AJAX Login <= 1.2.1 - Cross-Site Request Forgery