WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-images-upload-on-piclect
Published
2026-09-10
Title
WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload
Slug
wp-imagezoom
Published
2012-06-18
Title
Wp-ImageZoom <= 1.0.4 - File Disclosure
Slug
wp-imagezoom
Published
2014-08-01
Title
Wp-ImageZoom - zoom.php id Parameter SQL Injection
Slug
wp-imagezoom
Published
2024-10-16
Title
Wp-ImageZoom <= 1.1.0 - Reflected XSS
Slug
wp-imap-authentication
Published
2025-01-16
Title
WP IMAP Auth <= 4.0.1 - Reflected Cross-Site Scripting
Slug
wp-import-export
Published
2022-01-14
Title
WP Import Export < 3.9.16 - Unauthenticated Sensitive Data Disclosure
Slug
wp-import-export-lite
Published
2021-09-20
Title
WP Import Export Lite < 3.9.5 - Subscriber+ Extensions Update
Slug
wp-import-export-lite
Published
2021-09-20
Title
WP Import Export Lite < 3.9.5 - Subscriber+ Arbitrary Blog Options Update
Slug
wp-import-export-lite
Published
2022-01-14
Title
WP Import Export < 3.9.16 - Unauthenticated Sensitive Data Disclosure
Slug
wp-import-export-lite
Published
2024-04-05
Title
WP Import Export Lite < 3.9.27 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-import-export-lite
Published
2025-04-21
Title
WP Import Export Lite < 3.9.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
wp-import-export-lite
Published
2025-08-04
Title
WP Import Export Lite < 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
wp-import-export-lite
Published
2025-08-04
Title
WP Import Export Lite < 3.9.30 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
wp-import-export-lite
Published
2026-07-02
Title
WP Import Export Lite < 3.9.31 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter
Slug
wp-import-export-lite
Published
2026-09-14
Title
WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling
Slug
wp-import-export-lite
Published
2026-09-14
Title
WP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field Names
Slug
wp-import-export-lite
Published
2026-09-14
Title
WP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter Rules
Slug
wp-import-export-lite
Published
2026-09-14
Title
WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import Options
Slug
wp-import-export-lite
Published
2026-09-14
Title
WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal
Slug
wp-import-export-lite
Published
2026-09-14
Title
WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal
Slug
wp-import-export-lite
Published
2026-09-14
Title
WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Function
Slug
wp-import-export-lite
Published
2026-09-14
Title
WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import
Slug
wp-import-export-lite
Published
2026-09-14
Title
WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path Traversal
Slug
wp-import-export-lite
Published
2026-09-17
Title
WP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import
Slug
wp-infusionsoft-woocommerce
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting