WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-dummy-content-generator
Published
2023-07-07
Title
WP Dummy Content Generator < 3.0.0 - Cross-Site Request Forgery
Slug
wp-dummy-content-generator
Published
2024-02-02
Title
WP Dummy Content Generator < 3.1.3 - Missing Authorization
Slug
wp-dummy-content-generator
Published
2024-04-16
Title
WP Dummy Content Generator < 3.3.0 - Unauthenticated Code Injection
Slug
wp-dummy-content-generator
Published
2025-06-16
Title
WP Dummy Content Generator < 4.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletion
Slug
wp-duplicate-page
Published
2022-06-20
Title
WP Duplicate Page < 1.3 - Admin+ Stored Cross Site Scripting
Slug
wp-duplicate-page
Published
2025-11-17
Title
WP Duplicate Page < 1.8 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure
Slug
wp-dynamic-keywords-injector
Published
2023-02-20
Title
WP Dynamic Keywords Injector < 2.3.16 - Settings Update via CSRF
Slug
wp-dynamic-keywords-injector
Published
2024-04-15
Title
WP Dynamic Keywords Injector < 2.3.22 - Reflected Cross-Site Scripting
Slug
wp-dynamic-links
Published
2025-08-12
Title
WP Dynamic Links <= 1.0.1 - Reflected Cross-Site Scripting
Slug
wp-e-commerce
Published
2015-02-09
Title
WP eCommerce 3.8.9.5 - Cross-Site Scripting (XSS)
Slug
wp-e-commerce
Published
2014-08-01
Title
WP eCommerce 3.8.9 - Cross-Site Scripting (XSS)
Slug
wp-e-commerce
Published
2014-08-01
Title
WP eCommerce 3.8.9 - SQL Injection
Slug
wp-e-commerce
Published
2014-08-01
Title
WP eCommerce 3.8.6 - Cross-Site Scripting (XSS)
Slug
wp-e-commerce
Published
2015-02-09
Title
WP eCommerce <= 3.8.6 - SQL Injection
Slug
wp-e-commerce
Published
2014-10-05
Title
WP eCommerce <= 3.8.7.5 - Unspecified SQL Injection
Slug
wp-e-commerce
Published
2014-11-01
Title
WP eCommerce <= 3.8.14.3 - Authorisation Bypass
Slug
wp-e-commerce
Published
2015-04-20
Title
WP eCommerce <= 3.9.2 - Reflected Cross-Site Scripting (XSS)
Slug
wp-e-commerce
Published
2016-11-12
Title
WP eCommerce <= 3.11.3 - SQL Injection in sessionid
Slug
wp-e-commerce
Published
2024-02-27
Title
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
Slug
wp-e-commerce
Published
2024-02-27
Title
WP eCommerce <= 3.15.1 - Missing Authorization to Unauthenticated Arbitrary Post Creation
Slug
wp-e-commerce-predictive-search
Published
2014-08-01
Title
WP e-Commerce Predictive Search - "rs" Cross-Site Scripting
Slug
wp-e-commerce-style-email
Published
2024-11-18
Title
WP e-Commerce Style Email <= 0.6.2 - Reflected Cross-Site Scripting
Slug
wp-e-commerce-style-email
Published
2025-03-24
Title
WP e-Commerce Style Email <= 0.6.2 - Cross-Site Request Forgery to Remote Code Execution
Slug
wp-e-customers
Published
2025-02-20
Title
WP E Customers <= 0.0.1 - Reflected XSS
Slug
wp-eMember
Published
2024-05-14
Title
WP eMember < 10.3.9 - Reflected XSS