WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
vod-infomaniak
Published
2025-01-14
Title
VOD Infomaniak < 1.5.10 - Missing Authorization
Slug
vod-infomaniak
Published
2025-09-23
Title
VOD Infomaniak < 1.5.12 - Unauthenticated Stored Cross-Site Scripting
Slug
vodpod-video-gallery
Published
2010-11-05
Title
Vodpod Video Gallery <= 3.1.7 - Cross-Site Scripting (XSS)
Slug
voice-feedback
Published
2025-10-16
Title
Voice Feedback < 2.0.0 - Subscriber+ Privilege Escalation
Slug
void-elementor-post-grid-addon-for-elementor-page-builder
Published
2024-08-16
Title
Void Elementor Post Grid Addon for Elementor Page builder < 2.4 - Authenticated (Contributor+) Local File Inclusion
Slug
void-elementor-whmcs-elements
Published
2024-04-16
Title
Void Elementor WHMCS Elements For Elementor Page Builder < 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
void-elementor-whmcs-elements
Published
2025-04-14
Title
Void Elementor WHMCS Elements For Elementor Page Builder <= 2.0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
void-visual-whmcs-element
Published
2024-11-20
Title
WPBakery Visual Composer WHMCS Elements < 1.0.4.1 - Contributor+ Stored XSS
Slug
void-visual-whmcs-element
Published
2025-05-07
Title
WPBakery Visual Composer WHMCS Elements <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
void-visual-whmcs-element
Published
2025-12-17
Title
WPBakery Visual Composer WHMCS Elements <= 1.0.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
voidek-employee-portal
Published
2025-12-04
Title
Voidek Employee Portal < 1.0.8 - Missing Authorization
Slug
voltax-video-player
Published
2025-07-23
Title
Voltax Video Player <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
vooplayer
Published
2025-01-07
Title
vooPlayer v4 <= 4.0.4 - Reflected Cross-Site Scripting
Slug
vospari-forms
Published
2016-11-21
Title
Vospari Forms <= 1.3 - Cross-Site Scripting (XSS)
Slug
votecount-for-balatarin
Published
2014-04-25
Title
Votecount For Balatarin <= 0.1.1 - XSS
Slug
voting-record
Published
2024-01-10
Title
Voting Record <= 2.0 - Subscriber+ Stored XSS
Slug
voting-record
Published
2024-01-10
Title
Voting Record <= 2.0 - Settings Update to Stored XSS via CSRF
Slug
voucherpress
Published
2025-09-22
Title
VoucherPress <= 1.5.7 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
vp-sitemap
Published
2024-11-08
Title
VP Sitemap <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vr-calendar-sync
Published
2022-07-22
Title
VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
Slug
vr-calendar-sync
Published
2022-07-28
Title
VR Calendar < 2.3.1 - Reflected Cross-Site Scripting
Slug
vr-calendar-sync
Published
2022-07-28
Title
VR Calendar < 2.4.5 - LFI via CSRF
Slug
vr-calendar-sync
Published
2022-11-03
Title
VR Calendar < 2.3.4 - Calendar Deletion/Update & Settings Update via CSRF
Slug
vr-calendar-sync
Published
2024-09-24
Title
VR Calendar < 2.4.5 - Unauthenticated Local File Inclusion
Slug
vr-calendar-sync
Published
2025-06-26
Title
VR Calendar <= 2.4.7 - Cross-Site Request Forgery to Calendar Sync