WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wcc-seo-keyword-research
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wcc-seo-keyword-research
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wccp-pro
Published
2024-05-29
Title
WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect
Slug
wccp-pro
Published
2024-05-29
Title
WP Content Copy Protection & No Right Click (premium) <= 15.0 - Admin+ Stored XSS
Slug
wcfm-marketplace-rest-api
Published
2023-04-26
Title
WooCommerce Multivendor Marketplace – REST API < 1.6.0 - Subscriber+ Arbitrary Orders Item And Notes Update
Slug
wcfm-marketplace-rest-api
Published
2025-03-21
Title
WooCommerce Multivendor Marketplace – REST API < 1.6.3 - Authenticated (Subscriber+) SQL Injection
Slug
wck-custom-fields-and-custom-post-types-creator
Published
2022-12-21
Title
WCK < 2.3.3 - Admin+ Stored XSS
Slug
wcp-contact-form
Published
2023-04-19
Title
WCP Contact Form <= 3.1.0 - Reflected XSS
Slug
wcp-openweather
Published
2023-06-28
Title
WCP OpenWeather <= 2.5.0 - Reflected XSS
Slug
wcp-openweather
Published
2023-10-25
Title
WCP OpenWeather <= 2.5.0 - Cross-Site Request Forgery
Slug
wcs-qr-code-generator
Published
2025-01-16
Title
WCS QR Code Generator <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wcsm-search-merchandising
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wcsm-search-merchandising
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wd-facebook-feed
Published
2020-09-11
Title
10Web Social Post Feed < 1.1.27 - Authenticated SQL Injection
Slug
wd-facebook-feed
Published
2023-05-11
Title
10WebSocial < 1.2.9 - Reflected XSS
Slug
wd-facebook-feed
Published
2024-10-24
Title
10Web Social Post Feed <= 1.2.9 - Reflected Cross-Site Scripting
Slug
wd-google-analytics
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
wd-google-analytics
Published
2023-11-16
Title
10WebAnalytics <= 1.2.12 - Missing Authorization via gawd_wd_bp_install_notice_status
Slug
wd-google-maps
Published
2020-02-27
Title
10Web Map Builder for Google Maps < 1.0.64 - Unauthenticated Stored XSS via Plugin Settings Change
Slug
wd-google-maps
Published
2021-06-14
Title
10Web Map Builder for Google Maps < 1.0.70 - Authenticated Stored XSS
Slug
wd-google-maps
Published
2022-12-29
Title
10WebMapBuilder < 1.0.72 - Contributor+ Stored XSS via Shortcode
Slug
wd-google-maps
Published
2023-02-20
Title
10WebMapBuilder < 1.0.73 - Unauthenticated SQLi
Slug
wd-google-maps
Published
2023-09-13
Title
10Web Map Builder for Google Maps < 1.0.74 - Missing Authorization to Notice Dismissal
Slug
wd-google-maps
Published
2023-09-13
Title
10Web Map Builder for Google Maps < 1.0.74 - Cross-Site Request Forgery to Notice Dismissal
Slug
wd-google-maps
Published
2024-03-29
Title
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection