WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
webriti-companion
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
webriti-custom-login-page
Published
2024-11-01
Title
Webriti Custom Login <= 0.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
webriti-smtp-mail
Published
2022-05-18
Title
Webriti SMTP Mail <= 1.0 - Arbitrary Settings Update via CSRF
Slug
webrotate-360-product-viewer
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
websand-subscription-form
Published
2024-11-08
Title
Websand Subscription Form <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
websimon-tables
Published
2015-11-24
Title
Websimon Tables <= 1.3.4 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
website-article-monetization-by-magenet
Published
2024-03-19
Title
Website Article Monetization By MageNet < 1.0.12 - Unauthenticated Stored XSS
Slug
website-builder
Published
2025-09-22
Title
Draft <= 3.0.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
website-chat-button-kommo-integration
Published
2025-09-22
Title
Website Chat Button: Kommo integration <= 1.3.1 - Missing Authorization
Slug
website-contact-form-with-file-upload
Published
2015-04-12
Title
N-Media Website Contact Form with File Upload < 1.4 - Arbitrary File Upload
Slug
website-contact-form-with-file-upload
Published
2015-06-03
Title
N-Media Website Contact Form with File Upload <= 1.5 - Local File Inclusion
Slug
website-contact-form-with-file-upload
Published
2016-09-19
Title
N-Media Website Contact Form with File Upload - Arbitrary File Upload
Slug
website-faq
Published
2014-08-01
Title
Website FAQ 1.0 - wp-admin/admin-ajax.php category Parameter SQL injection
Slug
website-file-changes-monitor
Published
2022-07-18
Title
Website File Changes Monitor < 1.8.3 - Admin+ SQLi
Slug
website-file-changes-monitor
Published
2024-09-18
Title
Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injection
Slug
website-file-changes-monitor
Published
2024-09-18
Title
Website File Changes < 2.1.1 - Authenticated SQL Injection
Slug
website-file-changes-monitor
Published
2025-07-03
Title
Melapress File Monitor < 2.2.0 - Missing Authorization
Slug
website-monetization-by-magenet
Published
2023-03-16
Title
Website Monetization by MageNet < 1.0.29.2 - Cross-Site Request Forgery
Slug
website-testimonials
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
website-toolbox-forums
Published
2024-12-11
Title
Website Toolbox Community < 2.0.2 - Reflected Cross-Site Scripting via websitetoolbox_username
Slug
webtexttool
Published
2025-03-27
Title
Textmetrics < 3.6.2 - Missing Authorization
Slug
webtexttool
Published
2025-04-22
Title
Textmetrics < 3.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
webtoffee-gdpr-cookie-consent
Published
2024-07-24
Title
GDPR Cookie Consent <= 2.6.0 - Unauthenticated Stored XSS
Slug
webtoffee-gdpr-cookie-consent
Published
2024-08-25
Title
GDPR Cookie Consent <= 2.6.0 - Bulk Delete via CSRF
Slug
webtoffee-product-feed
Published
2025-06-05
Title
Product Feed for WooCommerce < 2.2.9 - Missing Authorization