WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
vdz-call-back
Published
2021-07-10
Title
VDZ CallBack < 1.1.4.6 - Authenticated Stored XSS
Slug
vdz-google-analytics
Published
2021-08-02
Title
VDZ Google Analytics or Google Tag Manager / GTM < 1.6.0 - Authenticated Stored XSS
Slug
vdz-google-analytics
Published
2021-08-02
Title
VDZ Google Analytics or Google Tag Manager / GTM < 1.4.9 - Authenticated Stored XSS
Slug
vdz-verification
Published
2021-07-17
Title
VDZ Verification < 1.4 - Authenticated Stored XSS
Slug
vegas-fullscreen-background-slider
Published
2025-04-25
Title
WP Vegas <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vehica-core
Published
2025-04-03
Title
Vehica Core < 1.0.98 - Authenticated (Subscriber+) Privilege Escalation
Slug
vehica-core
Published
2025-09-26
Title
Vehica Core < 1.0.101 - Cross-Site Request Forgery
Slug
vendor
Published
2024-06-27
Title
TrustedLogin Vendor < 1.1.1 - Unauthenticated Information Disclosure
Slug
venture-event-manager
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
verbalize-wp
Published
2024-10-21
Title
Verbalize WP <= 1.0 - Unauthenticated Arbitrary File Upload
Slug
verge3d
Published
2023-12-27
Title
Verge3D < 4.5.3 - Subscriber+ Arbitrary File Upload
Slug
verge3d
Published
2025-01-15
Title
Verge3D < 4.8.1 - Reflected Cross-Site Scripting
Slug
verge3d
Published
2025-03-27
Title
Verge3D < 4.8.3 - Cross-Site Request Forgery
Slug
verge3d
Published
2025-04-17
Title
Verge3D < 4.9.3 - Cross-Site Request Forgery
Slug
verge3d
Published
2025-05-29
Title
Verge3D < 4.9.4 - Reflected Cross-Site Scripting
Slug
verge3d
Published
2025-06-05
Title
Verge3D < 4.9.5 - Missing Authorization
Slug
verification-code-for-comments
Published
2014-08-01
Title
Verification Code for Comments 2.1.0 - vcc.js.php Multiple Parameter Reflected XSS
Slug
verification-sms-targetsms
Published
2025-04-23
Title
Verification SMS with TargetSMS <= 1.5 - Unauthenticated Limited Remote Code Execution
Slug
verowa-connect
Published
2024-12-05
Title
Verowa Connect < 3.0.2 - Unauthenticated SQL Injection
Slug
verowa-connect
Published
2025-04-09
Title
Verowa Connect < 3.1.0 - Admin+ SQL Injection
Slug
verowa-connect
Published
2025-04-14
Title
Verowa Connect < 3.0.5 - Reflected Cross-Site Scripting
Slug
verowa-connect
Published
2025-09-22
Title
Verowa Connect < 3.3.0 - Contributor+ Stored XSS
Slug
verse-o-matic
Published
2021-07-19
Title
Verse-O-Matic <= 4.1.1 - CSRF to Stored XSS
Slug
vertical-carousel-slider
Published
2024-11-28
Title
Vertical Carousel <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vertical-diamond-flipbook-flash
Published
2025-01-16
Title
Nature FlipBook WordPress Plugin <= 1.7 - Reflected Cross-Site Scripting