WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
visualizer
Published
2026-07-23
Title
Visualizer < 4.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' Parameter
Slug
visualizer
Published
2026-07-27
Title
Visualizer: Tables and Charts Manager < 4.0.6 - Contributor+ Server-Side Request Forgery via JSON Import
Slug
visualizer
Published
2026-07-23
Title
Visualizer – Tables & Charts Manager with Built-in AI Generator < 4.0.2 - Authenticated (Contributor+) SQL Injection
Slug
visualizer
Published
2026-08-14
Title
Visualizer < 4.0.7 - Contributor+ Cross-User Chart Configuration Disclosure
Slug
visualizer
Published
2026-09-09
Title
Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR
Slug
visualizer
Published
2026-09-09
Title
Visualizer < 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChart
Slug
visualizer
Published
2026-09-14
Title
Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data Source
Slug
visualmodo-elements
Published
2024-12-13
Title
Visualmodo Elements <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
visucom-smart-sections
Published
2025-04-17
Title
Smart Sections Theme Builder - WPBakery Page Builder Addon <= 1.7.8 - Unauthenticated PHP Object Injection
Slug
vit-website-reviews
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
vitamin
Published
2014-08-01
Title
Vitamin 1.0 - add_headers.php path Parameter Traversal Arbitrary File Access
Slug
vitamin
Published
2014-08-01
Title
Vitamin 1.0 - minify.php path Parameter Traversal Arbitrary File Access
Slug
vite-coupon
Published
2025-04-09
Title
Vite Coupon < 1.0.10 - Remote Code Execution via CSRF
Slug
vitepos
Published
2026-08-07
Title
Vitepos < 3.6.0 - Outlet Manager+ Privilege Escalation
Slug
vitepos
Published
2026-08-07
Title
Vitepos < 3.6.0 - Admin+ SQL Injection via product-details-report
Slug
vitepos-lite
Published
2024-04-25
Title
Vitepos < 3.0.2 - Missing Authorization
Slug
vitepos-lite
Published
2025-02-14
Title
Vitepos – Point of sale (POS) < 3.1.4 - Missing Authorization
Slug
vitepos-lite
Published
2025-03-31
Title
Vitepos < 3.1.5 - Missing Authorization
Slug
vitepos-lite
Published
2025-04-17
Title
Vitepos < 3.1.8 - Missing Authorization
Slug
vitepos-lite
Published
2025-11-20
Title
Vitepos – Point of Sale (POS) for WooCommerce < 3.3.1 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution
Slug
vitepos-lite
Published
2026-06-01
Title
Vitepos < 3.4.2 - Outlet Manager+ Privilege Escalation
Slug
vitepos-lite
Published
2026-06-18
Title
Vitepos – Point of Sale (POS) for WooCommerce < 3.4.3 - Unauthenticated Information Exposure
Slug
vitepos-lite
Published
2026-07-07
Title
Vitepos – Point of Sale (POS) for WooCommerce < 3.4.3 - Authenticated (Cashier+) SQL Injection
Slug
vitepos-lite
Published
2026-08-07
Title
Vitepos < 3.6.0 - Outlet Manager+ Privilege Escalation
Slug
vitepos-lite
Published
2026-09-28
Title
Vitepos – Point of Sale (POS) for WooCommerce < 3.5.1 - Authenticated (Custom Role+) Privilege Escalation