WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-responsive-photo-gallery
Published
2024-10-18
Title
Photo Gallery Slideshow & Masonry Tiled Gallery < 1.0.4 - Authenticated (Admin+) SQL Injection
Slug
wp-responsive-photo-gallery
Published
2025-01-03
Title
Photo Gallery Slideshow & Masonry Tiled Gallery < 1.0.16 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
Slug
wp-responsive-preview
Published
2015-01-01
Title
WP Responsive Preview - XSS
Slug
wp-responsive-slab-text
Published
2025-02-23
Title
WP Responsive Auto Fit Text < 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-responsive-slider-with-lightbox
Published
2023-10-11
Title
Thumbnail Slider With Lightbox < 1.0.1 - Image Lightboxes via CSRF
Slug
wp-responsive-slider-with-lightbox
Published
2023-10-17
Title
Thumbnail Slider With Lightbox < 1.0.1 - Admin+ Stored XSS
Slug
wp-responsive-slider-with-lightbox
Published
2023-10-26
Title
Thumbnail Slider With Lightbox < 1.0.1 - Arbitrary File Upload via CSRF
Slug
wp-responsive-slider-with-lightbox
Published
2025-10-28
Title
Thumbnail Slider With Lightbox < 1.0.5 - Authenticated (Admin+) SQL Injection
Slug
wp-responsive-slider-with-lightbox
Published
2025-11-11
Title
Thumbnail Slider With Lightbox < 1.0.22 - Contributor+ DOM-Based Stored XSS
Slug
wp-responsive-tabs
Published
2025-01-15
Title
WP Responsive Tabs < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-responsive-testimonials-slider-and-widget
Published
2023-01-25
Title
WP Responsive Testimonials Slider And Widget <= 1.5 - Contributor+ Stored XSS
Slug
wp-responsive-thumbnail-slider
Published
2015-08-28
Title
Thumbnail Carousel Slider < 1.0.1 - Stored Cross-Site Scripting (XSS) & CSRF
Slug
wp-responsive-thumbnail-slider
Published
2015-08-31
Title
Thumbnail Carousel Slider < 1.0.1 - Authenticated Shell Upload & CSRF
Slug
wp-responsive-thumbnail-slider
Published
2023-04-18
Title
Thumbnail carousel slider < 1.1.10 - Reflected XSS
Slug
wp-responsive-thumbnail-slider
Published
2023-10-26
Title
Thumbnail carousel slider < 1.0.1 - Cross-Site Request Forgery to Mass Slider Deletion
Slug
wp-responsive-thumbnail-slider
Published
2025-03-14
Title
Thumbnail carousel slider < 1.0.5 - Authenticated (Admin+) SQL Injection
Slug
wp-responsive-video-gallery-with-lightbox
Published
2023-05-15
Title
Video Carousel Slider with Lightbox < 1.0.23 - Reflected XSS
Slug
wp-responsive-video-gallery-with-lightbox
Published
2023-11-02
Title
video carousel slider with lightbox 1.0 - Cross-Site Request Forgery
Slug
wp-responsive-video-gallery-with-lightbox
Published
2024-09-10
Title
video carousel slider with lightbox < 1.0.7 - Authenticated (Admin+) SQL Injection
Slug
wp-rest-api-authentication
Published
2022-11-09
Title
REST API Authentication < 2.4.1 - Settings Update via CSRF
Slug
wp-rest-api-authentication
Published
2025-04-16
Title
WordPress REST API Authentication < 3.6.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
wp-rest-cache
Published
2025-07-28
Title
WP REST Cache < 2025.1.1 - Unauthenticated Local File Inclusion
Slug
wp-rest-filter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-rest-filter
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-rest-headless
Published
2025-10-14
Title
WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass