WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-security-questions
Published
2021-08-16
Title
WP Security Question <= 1.0.5 - Cross-Site Request Forgery
Slug
wp-security-scan
Published
2014-08-01
Title
Acunetix WP Security 4.0.3 - /wp-admin/admin.php wps-database Page Backup Generation CSRF Weakness
Slug
wp-sendfox
Published
2024-03-13
Title
WP SendFox < 1.3.1 - Missing Authorization
Slug
wp-sendfox
Published
2024-10-15
Title
WP SendFox <= 1.3.1 - Unauthenticated Information Disclosure
Slug
wp-sendgrid-mailer
Published
2024-08-26
Title
SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection
Slug
wp-sendgrid-mailer
Published
2024-10-17
Title
SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
Slug
wp-sendgrid-mailer
Published
2025-01-16
Title
SendGrid for WordPress <= 1.4 - Missing Authorization
Slug
wp-sendgrid-smtp
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
wp-sendsms
Published
2014-08-01
Title
WP-SendSMS - Setting Manipulation Cross-Site Request Forgery (CSRF)
Slug
wp-sendsms
Published
2014-08-01
Title
WP-SendSMS - Multiple Cross-Site Scripting (XSS)
Slug
wp-sentry
Published
2022-05-31
Title
WP Sentry <= 1.0 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
wp-seo-keyword-optimizer
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-seo-keyword-optimizer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-seo-keyword-optimizer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-seo-redirect-301
Published
2021-10-11
Title
WP SEO Redirect 301 < 2.3.2 - Redirect Deletion via CSRF
Slug
wp-seo-search
Published
2025-12-20
Title
SEO Search <= 1.1 - Cross-Site Request Forgery
Slug
wp-seo-spy-google
Published
2014-08-01
Title
wp-seo-spy-google - ofc_upload_image.php Arbitrary File Upload
Slug
wp-seo-structured-data-schema
Published
2025-05-07
Title
WP SEO Structured Data Schema < 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Settings
Slug
wp-seo-tags
Published
2021-08-13
Title
WP SEO Tags <= 2.2.7 - Reflected Cross-Site Scripting
Slug
wp-seo-tdk
Published
2021-07-20
Title
WP SEO TDK <= 2.1.2 - Unauthenticated Setting Update to Stored XSS
Slug
wp-seopress
Published
2021-08-16
Title
SEOPress 5.0.0 – 5.0.3 - Authenticated Stored Cross-Site Scripting
Slug
wp-seopress
Published
2023-04-10
Title
SEOPress < 6.5.0.3 - Admin+ PHP Object Injection
Slug
wp-seopress
Published
2023-12-26
Title
WP SEO Press < 7.3 - Admin+ Stored XSS
Slug
wp-seopress
Published
2024-03-22
Title
SEOPress – On-site SEO < 7.6 - Author+ Stored Cross-Site Scripting
Slug
wp-seopress
Published
2024-05-03
Title
SEOPress < 7.7 - Information Exposure