WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
web-directory-free
Published
2025-12-28
Title
Web Directory Free < 1.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
web-disrupt-funnelmentals
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
web-disrupt-funnelmentals
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
web-disrupt-funnelmentals
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
web-instant-messenger
Published
2020-10-12
Title
LocalWeb All In One plugin < 1.6.5 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
web-invoice
Published
2022-12-12
Title
Web Invoice <= 2.1.3 - Authenticated SQLi
Slug
web-invoice
Published
2022-12-12
Title
Web Invoice <= 2.1.3 - Authenticated SQLi
Slug
web-portal-lite-client-portal-secure-file-sharing-private-messaging
Published
2020-03-24
Title
Multiple plugins - Unauthenticated Dompdf Local File Inclusion (LFI)
Slug
web-push
Published
2025-01-16
Title
Web Push <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
web-stat
Published
2021-02-23
Title
Web-Stat < 1.4.1 - API Key Disclosure
Slug
web-stories
Published
2022-10-26
Title
Web Stories < 1.25.0 - Subscriber+ Server Side Request Forgery
Slug
web-stories
Published
2023-04-11
Title
Web Stories < 1.32 - Author+ Auth Bypass
Slug
web-stories
Published
2024-12-11
Title
Web Stories < 1.38.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
web-stories-enhancer
Published
2025-02-17
Title
Web Stories Enhancer – Level Up Your Web Stories < 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
web-testimonials
Published
2025-01-16
Title
Web Testimonials <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
web-to-sugarcrm-lead
Published
2025-12-20
Title
Web to SugarCRM Lead < 1.0.1 - Cross-Site Request Forgery to Custom Field Deletion
Slug
web2application
Published
2025-04-10
Title
Web2application <= 6.1 - Reflected Cross-Site Scripting
Slug
web3-authentication
Published
2023-06-29
Title
Web3 – Crypto wallet Login & NFT token gating < 2.7.0 - Authentication Bypass
Slug
web3-authentication
Published
2024-01-17
Title
Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass
Slug
web3-coin-gate
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
web3-token-gate
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
webapp-builder
Published
2017-03-07
Title
Webapp builder 2.0 - Unauthenticated File Upload
Slug
webappick-pdf-invoice-for-woocommerce
Published
2025-05-07
Title
Challan < 3.7.59 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
webappick-product-feed-for-woocommerce
Published
2019-08-30
Title
WooCommerce Product Feed for Google, Facebook, eBay and Many More < 3.1.15 - Authenticated Reflected XSS
Slug
webappick-product-feed-for-woocommerce
Published
2024-07-19
Title
CTX Feed < 6.5.7 - Shop Manager+ Arbitrary Options Update