WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-live-tv
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-live-tv
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-livephp
Published
2012-01-01
Title
WP Live.php <= 1.2.1 - Cross-Site Scripting (XSS)
Slug
wp-load-gallery
Published
2025-01-16
Title
WP Load Gallery <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload
Slug
wp-log-action
Published
2024-12-10
Title
WP Log Action < 0.52 - Reflected XSS
Slug
wp-log-viewer
Published
2024-11-15
Title
WP Log Viewer <= 1.2.1 - Missing Authorization
Slug
wp-login-and-logout-redirect
Published
2024-04-10
Title
WP Login and Logout Redirect < 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-login-attempt-log
Published
2025-01-16
Title
WP Login Attempt Log <= 1.3 - Reflected Cross-Site Scripting
Slug
wp-login-box
Published
2023-04-17
Title
WP Login Box <= 2.0.2 - Admin+ Stored XSS
Slug
wp-login-control
Published
2025-02-18
Title
WP Login Control <= 2.0.0 - Reflected XSS
Slug
wp-login-customizer
Published
2024-11-13
Title
wp-login customizer <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-login-security-and-history
Published
2021-04-12
Title
WP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)
Slug
wp-login-with-ajax
Published
2024-12-12
Title
Wp Login with Ajax <= 0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-logo-showcase
Published
2021-10-04
Title
Logo Slider and Showcase < 1.3.37 - Editor Plugin's Settings Update
Slug
wp-logo-showcase-responsive-slider-pro
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Slug
wp-logo-showcase-responsive-slider-slider
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Slug
wp-logs-book
Published
2024-05-31
Title
WP Logs Book <= 1.0.1 - Unauthenticated Stored XSS
Slug
wp-logs-book
Published
2024-05-31
Title
WP Logs Book <= 1.0.1 - Disable Logging via CSRF
Slug
wp-logs-book
Published
2024-05-31
Title
WP Logs Book <= 1.0.1 - Log Clearing via CSRF
Slug
wp-lucky-wheel
Published
2026-02-10
Title
Lucky Wheel Giveaway < 1.0.23 - Authenticated (Administrator+) Remote Code Execution via 'conditional_tags' Parameter
Slug
wp-lytebox
Published
2014-08-01
Title
Lytebox - Local File Inclusion
Slug
wp-magazine-modules-lite
Published
2024-06-18
Title
WP Magazine Modules Lite < 1.1.3 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-magnific-popup
Published
2026-05-27
Title
WP Magnific Popup <= 1.0 - Author+ Stored XSS via href Attribute
Slug
wp-mail
Published
2025-09-05
Title
WP Mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-mail
Published
2026-01-16
Title
Mail <= 1.3 - Reflected Cross-Site Scripting