WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-product-feed-manager
Published
2024-04-15
Title
WooCommerce Google Feed Manager < 2.6.0 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
Slug
wp-product-feed-manager
Published
2024-08-22
Title
WooCommerce Google Feed Manager < 2.9.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Feed Actions
Slug
wp-product-gallery-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-product-review
Published
2020-05-14
Title
WP Product Review < 3.7.6 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
wp-profitshare
Published
2025-03-24
Title
WP Profitshare <= 1.4.9 - Authenticated (Editor+) SQL Injection
Slug
wp-profitshare
Published
2025-04-01
Title
WP Profitshare <= 1.4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-programmmanager
Published
2025-02-26
Title
WP Programmmanager <= 1.2 - Reflected XSS
Slug
wp-programmmanager
Published
2025-02-16
Title
WP-PManager <= 1.2 - Category Deletion via CSRF
Slug
wp-programmmanager
Published
2025-02-16
Title
WP-PManager <= 1.2 - Admin+ SQL Injection
Slug
wp-projects-portfolio
Published
2025-01-14
Title
WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected XSS
Slug
wp-projects-portfolio
Published
2025-01-14
Title
WP Projects Portfolio with Client Testimonials <= 3.0 - Stored XSS via CSRF
Slug
wp-propagator
Published
2024-10-25
Title
Plugin Propagator <= 0.1 - Unauthenticated Arbitrary File Upload
Slug
wp-property
Published
2014-08-01
Title
WP Property < 1.38.4 - Non-administrative User XMLI Remote Information Disclosure
Slug
wp-property
Published
2014-08-01
Title
WP Property <= 1.35.0 - Arbitrary File Upload
Slug
wp-proposals
Published
2025-04-01
Title
WP Proposals <= 2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-proposals
Published
2025-09-22
Title
WP Proposals <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-ptviewer
Published
2025-01-16
Title
WP PT-Viewer <= 2.0.2 - Reflected Cross-Site Scripting
Slug
wp-publication-archive
Published
2025-09-05
Title
WP Publication Archive <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-publications
Published
2021-09-09
Title
wp-publications - Local File Inclusion
Slug
wp-publications
Published
2024-12-06
Title
WP Publications <= 1.2 - Admin+ Stored XSS
Slug
wp-push-notification-firebase
Published
2025-07-03
Title
WP Firebase Push Notification <= 1.2.0 - Cross-Site Request Forgery to Broadcast Notification
Slug
wp-query-console
Published
2024-10-25
Title
WP Query Console <= 1.0 - Unauthenticated Remote Code Execution
Slug
wp-query-creator
Published
2025-01-18
Title
WP Query Creator <= 1.0 - Reflected Cross-Site Scripting
Slug
wp-quick-front-end-editor
Published
2021-01-12
Title
WP Quick FrontEnd Editor <= 5.5 - Authenticated Content Injection
Slug
wp-quick-front-end-editor
Published
2021-01-12
Title
WP Quick FrontEnd Editor <= 5.5 - Authenticated Settings Change leading to Stored XSS