WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
videowhisper-live-streaming-integration
Published
2025-01-22
Title
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP < 6.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
videowhisper-live-streaming-integration
Published
2025-02-14
Title
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP < 6.2.1 - Unauthenticated Arbitrary File Deletion
Slug
videowhisper-live-streaming-integration
Published
2025-02-14
Title
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP < 6.2.1 - Unauthenticated Arbitrary File Read
Slug
videowhisper-live-streaming-integration
Published
2025-05-19
Title
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP < 6.2.5 - Cross-Site Request Forgery
Slug
videowhisper-video-conference-integration
Published
2014-08-01
Title
VideoWhisper Video Conference Integration 4.51 - Arbitrary File Upload
Slug
videowhisper-video-conference-integration
Published
2014-08-01
Title
VideoWhisper Video Conference Integration - Cross-Site Scripting (XSS)
Slug
videowhisper-video-conference-integration
Published
2015-03-31
Title
VideoWhisper Video Conference Integration 4.91.8 - Remote File Upload
Slug
videowhisper-video-presentation
Published
2014-08-01
Title
VideoWhisper Video Presentation <= 1.1 - SQL Injection
Slug
videowhisper-video-presentation
Published
2014-08-01
Title
VideoWhisper Video Presentation 3.17 - 'vw_upload.php' Arbitrary File Upload
Slug
videowhisper-video-presentation
Published
2014-09-20
Title
VideoWhisper Video Presentation 3.25 - vp/c_login.php room_name Parameter Reflected XSS
Slug
videowhisper-video-presentation
Published
2015-03-29
Title
VideoWhisper Video Presentation 3.31.17 - Remote File Upload
Slug
vidorev-extensions
Published
2025-03-13
Title
VidoRev Extensions < 2.9.9.9.9.9.6 - Missing Authorization to Unauthenticated Youtube Video Import
Slug
vidseo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
viet-affiliate-link
Published
2024-05-06
Title
Viet Affiliate Link <=1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
viet-nam-affiliate
Published
2024-05-06
Title
Viet Nam Affiliate <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
viewmedica
Published
2025-01-06
Title
ViewMedica Embed < 1.4.18 - Cross-Site Request Forgery to SQL Injection
Slug
viewmedica
Published
2025-01-06
Title
ViewMedica 9 < 1.4.18 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
viewmedica
Published
2025-01-14
Title
ViewMedica 9 < 1.4.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
views-for-wpforms-lite
Published
2024-01-24
Title
Views for WPForms < 3.2.3 - Missing Authorization via get_form_fields
Slug
views-for-wpforms-lite
Published
2024-01-24
Title
Views for WPForms < 3.2.3 - Cross-Site Request Forgery via create_view
Slug
views-for-wpforms-lite
Published
2024-01-24
Title
Views for WPForms < 3.2.3 - Missing Authorization via save_view
Slug
views-for-wpforms-lite
Published
2024-01-24
Title
Views for WPForms < 3.2.3 - Missing Authorization via create_view
Slug
views-for-wpforms-lite
Published
2024-01-24
Title
Views for WPForms < 3.2.3 - Cross-Site Request Forgery via save_view
Slug
vigilantor
Published
2023-03-21
Title
VigilanTor < 1.3.11 - Admin+ Stored XSS
Slug
viglink-spotlight-by-shortcode
Published
2025-12-11
Title
VigLink SpotLight By ShortCode <= 1.0.a - Authenticated (Contributor+) Stored Cross-Site Scripting via 'float' Shortcode Attribute