WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-plugin-manager
Published
2023-02-28
Title
WP Plugin Manager < 1.1.8 - Arbitrary Plugin Activation via CSRF
Slug
wp-plugin-manager
Published
2025-11-13
Title
Plugin Manager < 1.4.8 - Cross-Site Request Forgery
Slug
wp-pocket-urls
Published
2023-11-29
Title
WP Pocket URLs < 1.0.3 - Reflected Cross-Site Scripting
Slug
wp-pocket-urls
Published
2024-11-01
Title
WP Pocket URLs < 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-podcasts-manager
Published
2025-05-07
Title
WP Podcasts Manager < 1.4 - Cross-Site Request Forgery
Slug
wp-politic
Published
2023-02-28
Title
HT Politic < 2.3.8 - Arbitrary Plugin Activation via CSRF
Slug
wp-politic
Published
2024-11-01
Title
HT Politic < 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-poll
Published
2024-03-21
Title
LiquidPoll – Polls, Surveys, NPS and Feedback Reviews < 3.3.77 - Information Exposure
Slug
wp-poll
Published
2024-08-01
Title
LiquidPoll – Advanced Polls for Creators and Brands < 3.3.78 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-poll
Published
2024-08-20
Title
LiquidPoll <= 3.3.78 - Unauthenticated Stored Cross-Site Scripting via form_data Parameter
Slug
wp-polls
Published
2015-08-14
Title
WP-Polls <= 2.70 - Stored Cross-Site Scripting (XSS)
Slug
wp-polls
Published
2016-07-29
Title
WP-Polls <= 2.73 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
wp-polls
Published
2015-12-15
Title
WP Polls < 2.72 - SQL Injection
Slug
wp-polls
Published
2022-10-31
Title
WP-Polls < 2.76.0 - IP Validation Bypass
Slug
wp-polls
Published
2022-10-05
Title
WP-Polls < 2.77.0 - Subscriber+ Race Condition
Slug
wp-polls
Published
2025-01-21
Title
WP-Polls < 2.77.3 - Unauthenticated SQL Injection to Stored Cross-Site Scripting
Slug
wp-popup
Published
2014-12-12
Title
WP Popup <= 1.3 - XSS & CSRF
Slug
wp-popup-banners
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-popup-banners
Published
2023-03-17
Title
WP Popup Banners <= 1.2.5 - Subscriber+ SQLi
Slug
wp-popup-banners
Published
2023-03-22
Title
WP Popup Banners <= 1.2.5 - Subscriber+ SQLi
Slug
wp-popup-builder
Published
2022-09-05
Title
WP Popup Builder < 1.2.9 - Reflected Cross-Site Scripting
Slug
wp-popup-builder
Published
2022-09-05
Title
WP Popup Builder < 1.3.0 - Subscriber+ Arbitrary Popup Deletion
Slug
wp-popup-builder
Published
2024-10-15
Title
WP Popup Builder – Popup Forms and Marketing Lead Generation < 1.3.6 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add
Slug
wp-popup-builder
Published
2025-09-27
Title
WP Popup Builder <= 1.3.6 - Unauthenticated Information Exposure
Slug
wp-popup-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes