WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-live-chat-support
Published
2014-07-20
Title
WP Live Chat Support < 4.1.0 - XSS
Slug
wp-live-chat-support
Published
2017-07-10
Title
WP Live Chat Support < 1.7.03 - XSS
Slug
wp-live-chat-support
Published
2019-05-31
Title
WP Live Chat Support < 8.0.33 - Missing Permission Checks on some REST API Calls
Slug
wp-live-chat-support
Published
2020-07-12
Title
WP-Live Chat by 3CX < 8.2.0 - Authenticated Stored Cross-Site Scripting
Slug
wp-live-chat-support-pro
Published
2019-05-07
Title
WP Live Chat Support Pro - File Upload Bypass
Slug
wp-live-chat-support-pro
Published
2019-03-11
Title
WP Live Chat Support Pro < 8.0.0.7 - Unauthenticated RCE
Slug
wp-live-tv
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-live-tv
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-livephp
Published
2012-01-01
Title
WP Live.php <= 1.2.1 - Cross-Site Scripting (XSS)
Slug
wp-load-gallery
Published
2025-01-16
Title
WP Load Gallery <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload
Slug
wp-log-action
Published
2024-12-10
Title
WP Log Action < 0.52 - Reflected XSS
Slug
wp-log-viewer
Published
2024-11-15
Title
WP Log Viewer <= 1.2.1 - Missing Authorization
Slug
wp-login-and-logout-redirect
Published
2024-04-10
Title
WP Login and Logout Redirect < 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-login-attempt-log
Published
2025-01-16
Title
WP Login Attempt Log <= 1.3 - Reflected Cross-Site Scripting
Slug
wp-login-box
Published
2023-04-17
Title
WP Login Box <= 2.0.2 - Admin+ Stored XSS
Slug
wp-login-control
Published
2025-02-18
Title
WP Login Control <= 2.0.0 - Reflected XSS
Slug
wp-login-customizer
Published
2024-11-13
Title
wp-login customizer <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-login-security-and-history
Published
2021-04-12
Title
WP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)
Slug
wp-login-with-ajax
Published
2024-12-12
Title
Wp Login with Ajax <= 0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-logo-showcase
Published
2021-10-04
Title
Logo Slider and Showcase < 1.3.37 - Editor Plugin's Settings Update
Slug
wp-logo-showcase-responsive-slider-pro
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Slug
wp-logo-showcase-responsive-slider-slider
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Slug
wp-logs-book
Published
2024-05-31
Title
WP Logs Book <= 1.0.1 - Unauthenticated Stored XSS
Slug
wp-logs-book
Published
2024-05-31
Title
WP Logs Book <= 1.0.1 - Disable Logging via CSRF
Slug
wp-logs-book
Published
2024-05-31
Title
WP Logs Book <= 1.0.1 - Log Clearing via CSRF