WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-image-uploader
Published
2025-01-29
Title
WP Image Uploader <= 1.0.1 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
wp-image-zoooom
Published
2018-03-29
Title
WP Image Zoom <= 1.23 - Cross-Site Request Forgery (CSRF)
Slug
wp-image-zoooom
Published
2021-06-23
Title
WP Image Zoom < 1.47 - Local File Inclusion
Slug
wp-imageflow2
Published
2024-05-27
Title
WP Flow Plus < 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-imageflow2
Published
2024-10-21
Title
WP Flow Plus < 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-imageflow2
Published
2025-09-03
Title
WP Flow Plus < 5.2.6 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
wp-imagezoom
Published
2012-06-18
Title
Wp-ImageZoom <= 1.0.4 - File Disclosure
Slug
wp-imagezoom
Published
2014-08-01
Title
Wp-ImageZoom - zoom.php id Parameter SQL Injection
Slug
wp-imagezoom
Published
2024-10-16
Title
Wp-ImageZoom <= 1.1.0 - Reflected XSS
Slug
wp-imap-authentication
Published
2025-01-16
Title
WP IMAP Auth <= 4.0.1 - Reflected Cross-Site Scripting
Slug
wp-import-export
Published
2022-01-14
Title
WP Import Export < 3.9.16 - Unauthenticated Sensitive Data Disclosure
Slug
wp-import-export-lite
Published
2021-09-20
Title
WP Import Export Lite < 3.9.5 - Subscriber+ Extensions Update
Slug
wp-import-export-lite
Published
2021-09-20
Title
WP Import Export Lite < 3.9.5 - Subscriber+ Arbitrary Blog Options Update
Slug
wp-import-export-lite
Published
2022-01-14
Title
WP Import Export < 3.9.16 - Unauthenticated Sensitive Data Disclosure
Slug
wp-import-export-lite
Published
2024-04-05
Title
WP Import Export Lite < 3.9.27 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-import-export-lite
Published
2025-04-21
Title
WP Import Export Lite < 3.9.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
wp-import-export-lite
Published
2025-08-04
Title
WP Import Export Lite < 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
wp-import-export-lite
Published
2025-08-04
Title
WP Import Export Lite < 3.9.30 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
wp-infusionsoft-woocommerce
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
wp-inimat
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
Slug
wp-inject
Published
2018-01-04
Title
ImageInject <= 1.15 - Stored XSS & CSRF
Slug
wp-inject
Published
2022-12-02
Title
ImageInject <= 1.17 - Admin+ Stored XSS
Slug
wp-inquiries
Published
2025-04-09
Title
WP Inquiries <= 0.2.1 - Authenticated (Administrator+) SQL Injection
Slug
wp-insert
Published
2023-02-15
Title
WP Insert < 2.5.1 - Admin+ Stored XSS
Slug
wp-instagram-bank
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)