WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
web-directory-free
Published
2024-05-23
Title
Web Directory Free < 1.7.0 - Unauthenticated SQL Injection
Slug
web-directory-free
Published
2024-07-09
Title
Web Directory Free < 1.7.2 - Reflected XSS
Slug
web-directory-free
Published
2024-08-09
Title
Web Directory Free < 1.7.3 - Unauthenticated LFI
Slug
web-directory-free
Published
2024-09-30
Title
Web Directory Free < 1.7.4 - Reflected Cross-Site Scripting
Slug
web-directory-free
Published
2025-03-24
Title
Web Directory Free < 1.7.7 - Unauthenticated SQL Injection
Slug
web-directory-free
Published
2025-04-02
Title
Web Directory Free < 1.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
web-directory-free
Published
2025-04-17
Title
Web Directory Free < 1.7.9 - Reflected Cross-Site Scripting
Slug
web-directory-free
Published
2025-12-28
Title
Web Directory Free < 1.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
web-disrupt-funnelmentals
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
web-disrupt-funnelmentals
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
web-disrupt-funnelmentals
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
web-instant-messenger
Published
2020-10-12
Title
LocalWeb All In One plugin < 1.6.5 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
web-invoice
Published
2022-12-12
Title
Web Invoice <= 2.1.3 - Authenticated SQLi
Slug
web-invoice
Published
2022-12-12
Title
Web Invoice <= 2.1.3 - Authenticated SQLi
Slug
web-portal-lite-client-portal-secure-file-sharing-private-messaging
Published
2020-03-24
Title
Multiple plugins - Unauthenticated Dompdf Local File Inclusion (LFI)
Slug
web-push
Published
2025-01-16
Title
Web Push <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
web-stat
Published
2021-02-23
Title
Web-Stat < 1.4.1 - API Key Disclosure
Slug
web-stories
Published
2022-10-26
Title
Web Stories < 1.25.0 - Subscriber+ Server Side Request Forgery
Slug
web-stories
Published
2023-04-11
Title
Web Stories < 1.32 - Author+ Auth Bypass
Slug
web-stories
Published
2024-12-11
Title
Web Stories < 1.38.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
web-stories-enhancer
Published
2025-02-17
Title
Web Stories Enhancer – Level Up Your Web Stories < 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
web-testimonials
Published
2025-01-16
Title
Web Testimonials <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
web-to-sugarcrm-lead
Published
2025-12-20
Title
Web to SugarCRM Lead < 1.0.1 - Cross-Site Request Forgery to Custom Field Deletion
Slug
web2application
Published
2025-04-10
Title
Web2application <= 6.1 - Reflected Cross-Site Scripting
Slug
web3-authentication
Published
2023-06-29
Title
Web3 – Crypto wallet Login & NFT token gating < 2.7.0 - Authentication Bypass