WordPress Plugin Vulnerabilities | Page 114 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2023-09-25

Title

WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting

Slug

Published

2023-11-14

Title

Wordpress File Upload < 4.24.1 - Cross-Site Request Forgery

Slug

Published

2024-03-29

Title

WordPress File Upload < 4.24.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Slug

Published

2024-07-15

Title

WordPress File Upload < 4.24.8 - Authenticated (Contributor+) Directory Traversal

Slug

Published

2024-07-16

Title

WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS

Slug

Published

2024-07-16

Title

WordPress File Upload < 4.24.8 - Reflected XSS

Slug

Published

2024-08-01

Title

WordPress File Upload < 4.24.8 - Missing Authorization

Slug

Published

2024-08-15

Title

WordPress File Upload < 4.24.9 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

Slug

Published

2024-10-11

Title

WordPress File Upload < 4.24.12 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php

Slug

Published

2025-01-06

Title

WordPress File Upload < 4.25.0 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal

Slug

Published

2025-01-07

Title

WordPress File Upload < 4.25.0 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion

Slug

Published

2025-01-07

Title

WordPress File Upload < 4.24.14 - Unuathenticated Remote Code Execution

Slug

Published

2025-01-07

Title

WordPress File Upload < 4.24.14 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php

Slug

Published

2025-02-24

Title

WordPress File Upload < 4.25.3 - Cross-Site Request Forgery in wfu_file_details

Slug

wp-file-uploader

Published

2014-08-01

Title

File Uploader - PHP File Upload

Slug

Published

2014-08-01

Title

WP-Filebase Download Manager 0.3.0.02 - class/Admin.php GetFileHash Function Remote Comm& Execution

Slug

Published

2014-08-01

Title

WP-Filebase 0.2.9.24- Unspecified Vulnerabilities

Slug

Published

2011-09-09

Title

WP-Filebase Download Manager <= 0.2.9 - SQL Injection

Slug

Published

2017-03-01

Title

WP-Filebase Download Manager - Authenticated Cross-Site Scripting (XSS)

Slug

Published

2014-08-01

Title

wp-FileManager < 1.4.0 - File Download

Slug

Published

2023-02-28

Title

WP Film Studio < 1.3.5 - Arbitrary Plugin Activation via CSRF

Slug

wp-filter-combine-rss-feeds

Published

2025-08-22

Title

WP Filter & Combine RSS Feeds <= 0.4 - Missing Authorization to Authenticated (Contributor+) Feed Deletion

Slug

wp-filter-post-categories

Published

2025-04-24

Title

WP Filter Post Category <= 2.1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Slug

Published

2025-01-10

Title

WP Finance <= 1.3.6 - Reflected XSS

Slug

Published

2025-01-10

Title

WP Finance <= 1.3.6 - Stored XSS via CSRF