WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wd-google-analytics
Published
2023-11-16
Title
10WebAnalytics <= 1.2.12 - Missing Authorization via gawd_wd_bp_install_notice_status
Slug
wd-google-maps
Published
2020-02-27
Title
10Web Map Builder for Google Maps < 1.0.64 - Unauthenticated Stored XSS via Plugin Settings Change
Slug
wd-google-maps
Published
2021-06-14
Title
10Web Map Builder for Google Maps < 1.0.70 - Authenticated Stored XSS
Slug
wd-google-maps
Published
2022-12-29
Title
10WebMapBuilder < 1.0.72 - Contributor+ Stored XSS via Shortcode
Slug
wd-google-maps
Published
2023-02-20
Title
10WebMapBuilder < 1.0.73 - Unauthenticated SQLi
Slug
wd-google-maps
Published
2023-09-13
Title
10Web Map Builder for Google Maps < 1.0.74 - Missing Authorization to Notice Dismissal
Slug
wd-google-maps
Published
2023-09-13
Title
10Web Map Builder for Google Maps < 1.0.74 - Cross-Site Request Forgery to Notice Dismissal
Slug
wd-google-maps
Published
2024-03-29
Title
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection
Slug
wd-image-magnifier-xoss
Published
2024-11-08
Title
Wd-image-magnifier-xoss <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wd-instagram-feed
Published
2018-04-23
Title
WD Instagram Feed <= 1.3.0 - XSS
Slug
wd-instagram-feed
Published
2021-12-07
Title
10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)
Slug
wdes-responsive-mobile-menu
Published
2024-11-13
Title
WDES Responsive Mobile Menu <= 1.2.5 - Unauthenticated PHP Object Injection
Slug
wdesignkit
Published
2024-12-02
Title
WDesignkit < 1.1.0 - Authenticated (Administrator+) Arbitrary File Upload
Slug
wdesignkit
Published
2025-03-31
Title
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder < 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wdesignkit
Published
2025-10-03
Title
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder < 1.2.17 - Missing Authentication via wdkit_handle_review_submission Function
Slug
we-blocks
Published
2025-01-07
Title
WE Blocks <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
we-client-logo-carousel
Published
2024-11-08
Title
WE – Client Logo Carousel <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
we-testimonial-slider
Published
2025-01-30
Title
WE – Testimonial Slider <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
weather-atlas
Published
2023-10-29
Title
Weather Atlas Widget < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
weather-atlas
Published
2024-11-18
Title
Weather Atlas Widget < 3.0.4 - Unauthenticated Cross-Site Scripting
Slug
weather-effect
Published
2021-09-07
Title
Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting
Slug
weather-effect
Published
2021-09-07
Title
Weather Effect < 1.3.4 - CSRF to Stored Cross-Site Scripting
Slug
weather-in-any-city-widget
Published
2024-06-07
Title
Weather Widget Pro < 1.1.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
weather-layer
Published
2025-03-24
Title
Weather Layer <= 4.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
weaver-for-bbpress
Published
2025-01-03
Title
Turnkey bbPress by WeaverTheme < 1.7.1 - Reflected Cross-Site Scripting via _wpnonce Parameter