WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-facebook-review-showcase-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-facebook-reviews
Published
2022-01-31
Title
WP Review Slider < 11.0 - Admin+ SQL Injection
Slug
wp-facebook-reviews
Published
2023-01-23
Title
WP Review Slider < 12.2 - Subscriber+ SQLi
Slug
wp-facebook-reviews
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-facebook-reviews
Published
2023-12-26
Title
WP Review Slider < 13.0 - Admin+ Stored XSS
Slug
wp-facebook-reviews
Published
2023-12-27
Title
WP Review Slider < 12.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-facebook-reviews
Published
2026-03-23
Title
WP Review Slider < 14.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-facethumb
Published
2012-05-13
Title
WP-Facethumb Gallery <= 0.1 - Reflected Cross Site Scripting
Slug
wp-facturaone
Published
2026-07-06
Title
WP FacturaONE < 5.37 - Unauthenticated Remote Code Execution
Slug
wp-fade-in-text-news
Published
2023-10-30
Title
WP fade in text news < 12.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
wp-fail2ban
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-fail2ban
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-fail2ban
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-fail2ban
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
wp-fancybox
Published
2020-08-17
Title
Fancy Lightbox < 1.0.2 - Authenticated Stored Cross-Site Scripting
Slug
wp-fancybox
Published
2025-07-04
Title
WP fancybox <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-fast-cache
Published
2015-05-11
Title
WP Fast Cache <= 1.4 - CSRF & Cross-Site Scripting (XSS)
Slug
wp-fastest-cache
Published
2015-11-12
Title
WP Fastest Cache <= 0.8.4.8 - Blind SQL Injection
Slug
wp-fastest-cache
Published
2016-05-24
Title
WP Fastest Cache <= 0.8.5.7 - Local File Inclusion (LFI)
Slug
wp-fastest-cache
Published
2016-07-13
Title
WP Fastest Cache <= 0.8.5.9 - Local File Inclusion (LFI)
Slug
wp-fastest-cache
Published
2018-02-22
Title
WP Fastest Cache <= 0.8.7.4 - Blind SQL Injection
Slug
wp-fastest-cache
Published
2019-03-10
Title
WP Fastest Cache <= 0.8.9.0 - Unauthenticated Arbitrary File Deletion
Slug
wp-fastest-cache
Published
2019-07-28
Title
WP Fastest Cache <= 0.8.9.5 - Directory Traversal
Slug
wp-fastest-cache
Published
2018-10-09
Title
WP Fastest Cache <= 0.8.8.5 - CSRF and multiple XSS
Slug
wp-fastest-cache
Published
2015-05-26
Title
WP Fastest Cache < 0.8.3.5 - Multiple CSRF