WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
voltax-video-player
Published
2025-07-23
Title
Voltax Video Player <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
vooplayer
Published
2025-01-07
Title
vooPlayer v4 <= 4.0.4 - Reflected Cross-Site Scripting
Slug
vospari-forms
Published
2016-11-21
Title
Vospari Forms <= 1.3 - Cross-Site Scripting (XSS)
Slug
votecount-for-balatarin
Published
2014-04-25
Title
Votecount For Balatarin <= 0.1.1 - XSS
Slug
voting-record
Published
2024-01-10
Title
Voting Record <= 2.0 - Subscriber+ Stored XSS
Slug
voting-record
Published
2024-01-10
Title
Voting Record <= 2.0 - Settings Update to Stored XSS via CSRF
Slug
voucherpress
Published
2025-09-22
Title
VoucherPress <= 1.5.7 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
vp-sitemap
Published
2024-11-08
Title
VP Sitemap <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vr-calendar-sync
Published
2022-07-22
Title
VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
Slug
vr-calendar-sync
Published
2022-07-28
Title
VR Calendar < 2.3.1 - Reflected Cross-Site Scripting
Slug
vr-calendar-sync
Published
2022-07-28
Title
VR Calendar < 2.4.5 - LFI via CSRF
Slug
vr-calendar-sync
Published
2022-11-03
Title
VR Calendar < 2.3.4 - Calendar Deletion/Update & Settings Update via CSRF
Slug
vr-calendar-sync
Published
2024-09-24
Title
VR Calendar < 2.4.5 - Unauthenticated Local File Inclusion
Slug
vr-calendar-sync
Published
2025-06-26
Title
VR Calendar <= 2.4.7 - Cross-Site Request Forgery to Calendar Sync
Slug
vr-frases
Published
2025-01-27
Title
VR Frases < 4.0 - Reflected XSS
Slug
vr-frases
Published
2025-01-29
Title
VR-Frases (collect & share quotes) < 4.0 - Authenticated (Admin+) SQL Injection
Slug
vr-frases
Published
2025-01-29
Title
VR-Frases (collect & share quotes) < 4.0 - Reflected Cross-Site Scripting
Slug
vr-views
Published
2025-01-07
Title
VR Views <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vrm360
Published
2023-09-25
Title
Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure
Slug
vrm360
Published
2023-11-24
Title
Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE
Slug
vrpconnector
Published
2024-12-17
Title
VRPConnector <= 2.0.1 - Unauthenticated PHP Object Injection
Slug
vrview
Published
2018-04-23
Title
Outdated VRView Library Used, Leading to Reflected XSS
Slug
vslider
Published
2023-02-15
Title
vSlider Multi Image Slider for WordPress <= 4.1.2 - Contributor+ Stored XSS
Slug
vslider
Published
2023-07-17
Title
vSlider Multi Image Slider for WordPress <= 4.1.2 - Cross-Site Request Forgery
Slug
vstemplate-creator
Published
2025-01-16
Title
VSTEMPLATE Creator <= 2.0.2 - Reflected Cross-Site Scripting