WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
vk-blocks
Published
2023-05-09
Title
VK Blocks < 1.54.0 - Multiple Stored XSS
Slug
vk-blocks
Published
2023-06-02
Title
VK Blocks < 1.57.1.0 - Contributor+ Settings Update via REST API
Slug
vk-blocks
Published
2023-06-02
Title
VK Blocks < 1.58.0.0 - Contributor+ Settings Update via REST API
Slug
vk-blocks
Published
2023-10-24
Title
VK Blocks < 1.64.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block
Slug
vk-blocks
Published
2025-03-06
Title
VK Blocks < 1.95.0.3 - Missing Authorization to Sensitive Information Exposure
Slug
vk-blocks-pro
Published
2023-05-09
Title
VK Blocks < 1.54.0 - Multiple Stored XSS
Slug
vk-filter-search
Published
2023-10-25
Title
VK Filter Search < 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
vk-filter-search
Published
2025-04-04
Title
VK Filter Search <= 2.18.3.0 - Contributor+ Stored XSS
Slug
vk-gallery
Published
2014-08-01
Title
Vk Gallery 1.1.0 - Shell Upload
Slug
vk-google-job-posting-manager
Published
2025-12-15
Title
VK Google Job Posting Manager < 1.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vk-google-job-posting-manager
Published
2026-01-23
Title
VK Google Job Posting Manager < 1.2.24 - Authenticated (Author+) Stored Cross-Site Scripting via Job Description Field
Slug
vk-poster-group
Published
2024-02-09
Title
VK Poster Group <= 2.0.3 - Reflected Cross-Site Scripting via vkp_repost
Slug
vkontakte-api
Published
2014-08-01
Title
vkontakte-api - vkontakte-api/swf/tagcloud.swf tagcloud Parameter XSS
Slug
vkontakte-cross-post
Published
2025-04-09
Title
VKontakte Cross-Post <= 0.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
vkontakte-wall-post
Published
2024-10-15
Title
VKontakte Wall Post <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
vm-backups
Published
2021-03-13
Title
VM Backups <= 1.0 - CSRF to Database Backup Download
Slug
vm-backups
Published
2021-03-13
Title
VM Backups <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)
Slug
vm-menu-reorder
Published
2025-09-26
Title
VM Menu Reorder plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update
Slug
vmax-project-manager
Published
2024-09-24
Title
Vmax Project Manager <= 1.0 - Unauthenticated Local File Inclusion
Slug
vn-calendar
Published
2014-11-14
Title
VN-Calendar <= 1.0 - Multiple Cross-Site Scripting (XSS)
Slug
vnpay-for-woocommerce
Published
2025-10-23
Title
VNPAY for Woocommerce <= 1.0.0 - Reflected Cross-Site Scripting
Slug
vo-locator-the-wp-store-locator
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
vo-locator-the-wp-store-locator
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
vod-infomaniak
Published
2024-04-25
Title
VOD Infomaniak < 1.5.7 - Reflected Cross-Site Scripting
Slug
vod-infomaniak
Published
2024-10-14
Title
VOD Infomaniak < 1.5.8 - Cross-Site Request Forgery