WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-appointment-scheduling
Published
2020-08-10
Title
Ultimate Appointment Booking & Scheduling < 1.1.10 - Authenticated Cross-Site Scripting (XSS)
Slug
ultimate-auction
Published
2014-08-01
Title
Ultimate Auction 1.0 - Cross-Site Request Forgery (CSRF)
Slug
ultimate-auction
Published
2019-12-18
Title
Ultimate Auction < 4.0.6 - Multiple CSRF & XSS
Slug
ultimate-auction
Published
2024-07-06
Title
Ultimate Auction < 4.2.6 - Cross-Site Request Forgery
Slug
ultimate-auction
Published
2024-07-26
Title
Ultimate WordPress Auction Plugin < 4.2.8 - Missing Authorization to Unauthenticated Email Creation
Slug
ultimate-auction
Published
2025-03-03
Title
Ultimate WordPress Auction Plugin < 4.3.0 - Contributor+ Arbitrary Post Deletion
Slug
ultimate-auction
Published
2025-12-12
Title
Ultimate Auction <= 4.3.2 - Missing Authorization
Slug
ultimate-auction
Published
2025-12-12
Title
Ultimate Auction <= 4.3.2 - Unauthenticated Information Exposure
Slug
ultimate-author-box-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ultimate-bar
Published
2025-03-24
Title
Top Bar <= 3.3 - Missing Authorization
Slug
ultimate-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ultimate-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ultimate-blocks
Published
2024-04-23
Title
Ultimate Blocks < 3.1.7 - Contributor+ Stored XSS
Slug
ultimate-blocks
Published
2024-06-18
Title
Ultimate Blocks – WordPress Blocks Plugin < 3.1.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via metabox
Slug
ultimate-blocks
Published
2024-06-20
Title
Ultimate Blocks < 3.1.9 - Contributor+ Stored XSS
Slug
ultimate-blocks
Published
2024-07-01
Title
Ultimate Blocks – WordPress Blocks Plugin < 3.2.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Multiple Blocks
Slug
ultimate-blocks
Published
2024-07-01
Title
Ultimate Blocks – WordPress Blocks Plugin < 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title tag attribute
Slug
ultimate-blocks
Published
2024-07-08
Title
Ultimate Blocks < 3.2.0 - Contributor+ Stored XSS
Slug
ultimate-blocks
Published
2024-09-09
Title
Ultimate Blocks < 3.2.2 - Contributor+ Stored XSS
Slug
ultimate-blocks
Published
2024-11-22
Title
Ultimate Blocks < 3.2.4 - Contributor+ Stored XSS
Slug
ultimate-blocks
Published
2025-03-25
Title
Ultimate Blocks < 3.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter
Slug
ultimate-blocks
Published
2025-03-25
Title
Ultimate Blocks – WordPress Blocks Plugin < 3.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-blocks
Published
2025-03-28
Title
Ultimate Blocks < 3.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-blocks
Published
2025-05-07
Title
Ultimate Blocks < 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-blocks
Published
2025-05-19
Title
Ultimate Blocks < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting