WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
very-simple-contact-form
Published
2024-03-29
Title
VS Contact Form < 14.8 - CAPTCHA Bypass
Slug
very-simple-google-maps
Published
2023-01-20
Title
Very Simple Google Maps < 2.9 - Contributor+ Stored XSS
Slug
very-simple-google-maps
Published
2023-10-23
Title
Very Simple Google Maps < 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
very-simple-quiz
Published
2020-08-10
Title
Very Simple Quiz - Multiple Authenticated Stored Cross-Site Scripting (XSS)
Slug
vg-postcarousel
Published
2025-02-24
Title
VG PostCarousel <= 1.1 - Authenticated (Contributor+) Local File Inclusion
Slug
vg-woocarousel
Published
2025-04-04
Title
VG WooCarousel <= 1.3 - Authenticated (Contributor+) Local File Inclusion
Slug
vgw-metis
Published
2025-06-25
Title
VG WORT METIS < 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
Slug
vgw-metis
Published
2025-06-26
Title
VG WORT METIS <= 2.0.1 - Missing Authorization
Slug
vi-include-post-by
Published
2026-04-14
Title
VI: Include Post By <= 0.4.200706 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class_container' Shortcode Attribute
Slug
viaads
Published
2025-11-03
Title
ViaAds < 2.1.3 - Cross-Site Request Forgery to API Key Update
Slug
viabill-woocommerce
Published
2026-03-16
Title
ViaBill – WooCommerce < 1.1.70 - Missing Authorization to Unauthenticated Settings Change
Slug
viable-url-media-uploader
Published
2026-09-29
Title
Viable URL Media Uploader <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
vibebp
Published
2024-12-17
Title
VibeBP < 1.9.9.5.1 - Authenticated (Subscriber+) SQL Injection
Slug
vibebp
Published
2024-12-17
Title
VibeBP < 1.9.9.7.7 - Unauthenticated SQL Injection
Slug
vibebp
Published
2024-12-17
Title
VibeBP < 1.9.9.5 - Unauthenticated Privilege Escalation
Slug
vibes
Published
2025-08-25
Title
Vibes < 2.2.1 - Unauthenticated SQL Injection via `resource` Parameter
Slug
vice-versa
Published
2025-04-10
Title
Vice Versa <= 2.2.3 - Reflected Cross-Site Scripting
Slug
video-analytics-for-cloudflare-stream
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
video-background
Published
2023-02-20
Title
Video Background < 2.7.5 - Contributor+ Stored XSS via Shortcode
Slug
video-background-block
Published
2026-10-05
Title
Video Background Block – Add Stunning Video Backgrounds to Any Section < 2.0.4 - Unauthenticated Stored Cross-Site Scripting
Slug
video-blogster-lite
Published
2025-07-23
Title
Video Blogster Lite <= 1.2 - Reflected Cross-Site Scripting
Slug
video-blogster-lite
Published
2025-09-26
Title
Video Blogster Lite <= 1.2 - Cross-Site Request Forgery
Slug
video-central
Published
2023-03-28
Title
Video Central for WordPress <= 1.3.0 - Contributor+ Stored XSS
Slug
video-comments-webcam-recorder
Published
2014-06-12
Title
Video Comments Webcam Recorder < 1.92 - Unauthenticated Reflected XSS
Slug
video-conferencing-with-zoom-api
Published
2022-02-14
Title
Video Conferencing with Zoom < 3.8.17 - E-mail Address Disclosure