WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
web-stories
Published
2023-04-11
Title
Web Stories < 1.32 - Author+ Auth Bypass
Slug
web-stories
Published
2024-12-11
Title
Web Stories < 1.38.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
web-stories-enhancer
Published
2025-02-17
Title
Web Stories Enhancer – Level Up Your Web Stories < 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
web-testimonials
Published
2025-01-16
Title
Web Testimonials <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
web-to-sugarcrm-lead
Published
2025-12-20
Title
Web to SugarCRM Lead < 1.0.1 - Cross-Site Request Forgery to Custom Field Deletion
Slug
web2application
Published
2025-04-10
Title
Web2application <= 6.1 - Reflected Cross-Site Scripting
Slug
web3-authentication
Published
2023-06-29
Title
Web3 – Crypto wallet Login & NFT token gating < 2.7.0 - Authentication Bypass
Slug
web3-authentication
Published
2024-01-17
Title
Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass
Slug
web3-coin-gate
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
web3-token-gate
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
webapp-builder
Published
2017-03-07
Title
Webapp builder 2.0 - Unauthenticated File Upload
Slug
webappick-pdf-invoice-for-woocommerce
Published
2025-05-07
Title
Challan < 3.7.59 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
webappick-product-feed-for-woocommerce
Published
2019-08-30
Title
WooCommerce Product Feed for Google, Facebook, eBay and Many More < 3.1.15 - Authenticated Reflected XSS
Slug
webappick-product-feed-for-woocommerce
Published
2024-07-19
Title
CTX Feed < 6.5.7 - Shop Manager+ Arbitrary Options Update
Slug
webappick-product-feed-for-woocommerce
Published
2026-01-04
Title
CTX Feed <= 6.6.18 - Missing Authorization
Slug
webba-booking-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
webba-booking-lite
Published
2022-04-15
Title
Webba Booking < 4.2.22 - Admin+ Stored Cross-Site Scripting
Slug
webba-booking-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
webba-booking-lite
Published
2023-12-26
Title
Webba Booking < 5.0 - Cross-Site Request Forgery
Slug
webba-booking-lite
Published
2024-09-23
Title
Appointment & Event Booking Calendar Plugin – Webba Booking < 5.0.50 - Missing Authorization to Authenticated (Subscriber+) CSS Settings Update
Slug
webba-booking-lite
Published
2025-07-16
Title
Webba Booking < 5.1.22 - Missing Authorization
Slug
webba-booking-lite
Published
2025-07-16
Title
Webba Booking < 5.1.21 - Cross-Site Request Forgery
Slug
webba-booking-lite
Published
2025-08-14
Title
Webba Booking < 6.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
webba-booking-lite
Published
2025-12-15
Title
Webba Booking < 6.2.2 - Missing Authorization
Slug
webbricks-addons
Published
2024-10-21
Title
Web Bricks Addons for Elementor < 1.1.11 - Contributor+ Stored XSS