WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
webinar-ignition
Published
2023-02-03
Title
WebinarIgnition < 2.14.3 - Admin+ Stored XSS
Slug
webinar-ignition
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
webinar-ignition
Published
2023-12-27
Title
WebinarIgnition < 3.05.1 - Missing Authorization to Unauthenticated Privilege Escalation
Slug
webinar-ignition
Published
2023-12-27
Title
WebinarIgnition < 3.05.1 - Authenticated (Subscriber+) PHP Object Injection
Slug
webinar-ignition
Published
2023-12-27
Title
WebinarIgnition < 3.05.1 - Unauthenticated SQL Injection
Slug
webinar-ignition
Published
2024-04-12
Title
WebinarIgnition < 3.06.0 - Cross-Site Request Forgery
Slug
webinar-ignition
Published
2025-07-23
Title
Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition < 4.03.33 - Unauthenticated Login Token Generation to Authentication Bypass
Slug
webinar-ignition
Published
2025-08-10
Title
WebinarIgnition < 4.06.05 - Missing Authorization
Slug
webinar-ignition
Published
2026-05-04
Title
WebinarIgnition < 4.09.86 - Unauthenticated SQL Injection
Slug
webinar_plugin
Published
2014-08-01
Title
Easy Webinar - get_widget.php wid Parameter SQL Injection
Slug
weblibrarian
Published
2019-07-16
Title
Web Librarian < 3.5.5 - SQL Injection
Slug
weblibrarian
Published
2017-07-20
Title
Weblibrarian < 3.4.8.5 - XSS
Slug
weblibrarian
Published
2017-07-25
Title
Weblibrarian < 3.4.8.6 - XSS
Slug
weblibrarian
Published
2017-07-25
Title
Weblibrarian < 3.4.8.7 - XSS
Slug
weblibrarian
Published
2023-08-14
Title
WebLibrarian <= 3.5.8.4 - Reflected XSS
Slug
webling
Published
2025-04-01
Title
Webling < 3.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
webling
Published
2026-04-09
Title
Webling < 3.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'title' Parameter
Slug
weblizar-companion
Published
2025-06-27
Title
IS-theme-companion <= 1.59 - Cross-Site Request Forgery
Slug
weblizar-pinterest-feeds
Published
2018-01-12
Title
Pinterest Feed <= 1.1.1 - Authenticated XSS & CSRF
Slug
webman-amplifier
Published
2025-12-31
Title
WebMan Amplifier < 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
webmaster-tools
Published
2023-10-17
Title
Webmaster Tools <= 2.0 - Admin+ Stored XSS
Slug
webmaster-tools
Published
2023-10-17
Title
Webmaster Tools <= 2.0 - Settings Update to Stored XSS via CSRF
Slug
webmaster-tools-verification
Published
2022-10-19
Title
Webmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin Deactivation
Slug
webmention
Published
2026-04-01
Title
Webmention < 5.7.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
webmention
Published
2026-04-01
Title
Webmention < 5.7.0 - Unauthenticated Blind Server-Side Request Forgery