WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-experiments-free
Published
2025-01-07
Title
Title Experiments Free <= 9.0.4 - Cross-Site Request Forgery
Slug
wp-experiments-free
Published
2025-01-07
Title
Title Experiments Free <= 9.0.4 - Missing Authorization
Slug
wp-expert-agent-xml-feed
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-explorer-gallery
Published
2014-08-01
Title
wp-explorer-gallery - Arbitrary File Upload
Slug
wp-export-categories-taxonomies
Published
2025-12-31
Title
Export Categories & Taxonomies <= 1.0.3 - Missing Authorization
Slug
wp-express-checkout
Published
2023-03-17
Title
WP Express Checkout < 2.2.9 - Admin+ Stored XSS
Slug
wp-express-checkout
Published
2024-03-29
Title
WP Express Checkout (Accept PayPal Payments) < 2.3.8 - Unauthenticated Price Manipulation
Slug
wp-extended
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-extended-search
Published
2023-01-06
Title
WP Extended Search < 2.1.2 - Contributor+ Stored XSS via Shortcode
Slug
wp-external-links
Published
2016-03-31
Title
WP External Links <= 1.80 - Multiple Cross-Site Scripting (XSS)
Slug
wp-extra
Published
2023-10-24
Title
WP EXtra < 6.3 - Subscriber+ .htaccess File Modification
Slug
wp-extra
Published
2023-11-16
Title
WP EXtra < 6.5 - Cross-Site Request Forgery ToolImport
Slug
wp-extra
Published
2023-10-25
Title
WP EXtra < 6.3 - Missing Authorization to Arbitrary Email Sending
Slug
wp-extra
Published
2023-10-19
Title
WP EXtra < 6.3 - Missing Authorization to Export Settings
Slug
wp-extra-fields
Published
2025-02-04
Title
WP Extra Fields <= 1.0.1 - Reflected XSS
Slug
wp-extra-file-types
Published
2021-12-27
Title
WP Extra File Types < 0.5.1 - CSRF to Stored Cross-Site Scripting
Slug
wp-facebook-feed
Published
2023-10-02
Title
The Awesome Feed – Custom Feed <= 2.2.5 - Contributor+ Stored XSS
Slug
wp-facebook-feed
Published
2023-10-16
Title
The Awesome Feed – Custom Feed <= 2.2.5 - Reflected XSS
Slug
wp-facebook-group
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-facebook-group
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-facebook-messenger
Published
2023-10-23
Title
Live Chat with Facebook Messenger < 1.0 - Contributor+ Stored XSS via Shortcode
Slug
wp-facebook-review-showcase-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-facebook-reviews
Published
2022-01-31
Title
WP Review Slider < 11.0 - Admin+ SQL Injection
Slug
wp-facebook-reviews
Published
2023-01-23
Title
WP Review Slider < 12.2 - Subscriber+ SQLi
Slug
wp-facebook-reviews
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting