WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
verge3d
Published
2026-09-28
Title
Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API
Slug
verge3d
Published
2026-09-25
Title
Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done
Slug
verification-code-for-comments
Published
2014-08-01
Title
Verification Code for Comments 2.1.0 - vcc.js.php Multiple Parameter Reflected XSS
Slug
verification-sms-targetsms
Published
2025-04-23
Title
Verification SMS with TargetSMS <= 1.5 - Unauthenticated Limited Remote Code Execution
Slug
verowa-connect
Published
2024-12-05
Title
Verowa Connect < 3.0.2 - Unauthenticated SQL Injection
Slug
verowa-connect
Published
2025-04-09
Title
Verowa Connect < 3.1.0 - Admin+ SQL Injection
Slug
verowa-connect
Published
2025-04-14
Title
Verowa Connect < 3.0.5 - Reflected Cross-Site Scripting
Slug
verowa-connect
Published
2025-09-22
Title
Verowa Connect < 3.3.0 - Contributor+ Stored XSS
Slug
verse-o-matic
Published
2021-07-19
Title
Verse-O-Matic <= 4.1.1 - CSRF to Stored XSS
Slug
vertical-carousel-slider
Published
2024-11-28
Title
Vertical Carousel <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vertical-diamond-flipbook-flash
Published
2025-01-16
Title
Nature FlipBook WordPress Plugin <= 1.7 - Reflected Cross-Site Scripting
Slug
vertical-marquee-plugin
Published
2023-08-22
Title
Vertical Marquee <= 7.2 - Admin+ Stored XSS
Slug
vertical-marquee-plugin
Published
2023-10-30
Title
Vertical marquee plugin < 7.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
vertical-news-scroller
Published
2021-03-26
Title
Vertical News Scroller < 1.17 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
vertical-response-newsletter-widget
Published
2025-05-02
Title
VerticalResponse Newsletter Widget <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vertical-scroll-image-slideshow-gallery
Published
2025-07-17
Title
Vertical scroll image slideshow gallery <= 11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Slug
vertical-scroll-recent-post
Published
2022-04-26
Title
Vertical scroll recent post < 14.0 - Reflected Cross-Site Scripting
Slug
vertical-scroll-recent-post
Published
2023-03-21
Title
Vertical scroll recent post <= 14.0 - Contributor+ Stored Cross-Site Scripting
Slug
vertical-scroll-recent-post
Published
2023-11-08
Title
Vertical scroll recent post <= 14.0 - Cross-Site Request Forgery via vsrp_admin_options
Slug
vertical-scroll-slideshow-gallery-v2
Published
2025-08-15
Title
Vertical scroll slideshow gallery v2 <= 9.1 - Authenticated (Contributor+) SQL Injection
Slug
verve-meta-boxes
Published
2014-08-01
Title
Verve Meta Boxes 1.2.8 - Shell Upload
Slug
verweise-wordpress-twitter
Published
2014-08-01
Title
Verwei.se WordPress Twitter < 1.0 2 - Cross-Site Scripting (XSS)
Slug
very-simple-breadcrumb
Published
2022-06-21
Title
Very Simple Breadcrumb <= 1.0 - Admin+ Stored Cross-Site Scripting
Slug
very-simple-contact-form
Published
2022-05-30
Title
Very Simple Contact Form < 11.6 - Captcha bypass
Slug
very-simple-contact-form
Published
2023-09-05
Title
VS Contact Form < 14.0 - Missing Authorization