WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-foft-loader
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-foft-loader
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-foft-loader
Published
2026-02-03
Title
WP FOFT Loader < 2.1.40 - Authenticated (Author+) Arbitrary File Upload
Slug
wp-font-awesome
Published
2023-01-24
Title
WP Font Awesome < 1.7.9 - Contributor+ Stored XSS
Slug
wp-font-awesome
Published
2023-10-23
Title
WP Font Awesome <= 1.7.9 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
wp-font-awesome-share-icons
Published
2024-05-21
Title
WP Font Awesome Share Icons <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-font-pairing-preview
Published
2026-03-06
Title
Font Pairing Preview For Landing Pages <= 1.3 - Cross-Site Request Forgery to Settings Update
Slug
wp-food
Published
2025-04-09
Title
WP Food ordering and Restaurant Menu <= 1.1 - Unauthenticated Local File Inclusion
Slug
wp-food
Published
2026-03-02
Title
Food < 2.7.1 - Missing Authorization
Slug
wp-food-manager
Published
2023-07-17
Title
WP Food Manager < 1.0.4 - Admin+ Stored XSS
Slug
wp-foodbakery
Published
2021-06-14
Title
FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)
Slug
wp-foodbakery
Published
2025-02-10
Title
WP Foodbakery < 4.8 - Unauthenticated Arbitrary File Upload
Slug
wp-foodbakery
Published
2025-02-10
Title
WP Foodbakery <= 4.8 - Reflected Cross-Site Scripting
Slug
wp-foodbakery
Published
2025-02-10
Title
WP Foodbakery < 4.8 - Unauthenticated Privilege Escalation in foodbakery_registration_validation
Slug
wp-foodbakery
Published
2025-02-10
Title
WP Foodbakery <= 4.7 - Authentication Bypass
Slug
wp-foodbakery
Published
2025-04-21
Title
WP FoodBakery <= 3.3 - Unauthenticated PHP Object Injection
Slug
wp-football
Published
2014-08-01
Title
wp-football 1.1 - Multiple Cross-Site Scripting (XSS)
Slug
wp-force-images-download
Published
2025-10-21
Title
WP-Force Images Download < 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-force-ssl
Published
2024-06-07
Title
WP Force SSL & HTTPS SSL Redirect < 1.67 - Missing Authorization to Settings Update
Slug
wp-forecast
Published
2022-08-25
Title
WP Forecast < 7.6 - Admin+ Stored Cross-Site Scripting
Slug
wp-forecast
Published
2024-03-28
Title
wp-forecast < 9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-forms-puzzle-captcha
Published
2023-10-03
Title
WP Forms Puzzle Captcha <= 4.1 - CSRF
Slug
wp-forms-puzzle-captcha
Published
2023-11-28
Title
WP Forms Puzzle Captcha <= 4.1 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
wp-forms-puzzle-captcha
Published
2023-11-28
Title
WP Forms Puzzle Captcha <= 4.1 - Captcha Bypass
Slug
wp-forms-signature-contract-add-on
Published
2026-01-19
Title
WP Forms Signature Contract Add-On < 1.8.3 - Missing Authorization to Authenticated (Subscriber+) Notice Dimissal