WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-polls
Published
2015-12-15
Title
WP Polls < 2.72 - SQL Injection
Slug
wp-polls
Published
2022-10-31
Title
WP-Polls < 2.76.0 - IP Validation Bypass
Slug
wp-polls
Published
2022-10-05
Title
WP-Polls < 2.77.0 - Subscriber+ Race Condition
Slug
wp-polls
Published
2025-01-21
Title
WP-Polls < 2.77.3 - Unauthenticated SQL Injection to Stored Cross-Site Scripting
Slug
wp-popup
Published
2014-12-12
Title
WP Popup <= 1.3 - XSS & CSRF
Slug
wp-popup-banners
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-popup-banners
Published
2023-03-17
Title
WP Popup Banners <= 1.2.5 - Subscriber+ SQLi
Slug
wp-popup-banners
Published
2023-03-22
Title
WP Popup Banners <= 1.2.5 - Subscriber+ SQLi
Slug
wp-popup-builder
Published
2022-09-05
Title
WP Popup Builder < 1.2.9 - Reflected Cross-Site Scripting
Slug
wp-popup-builder
Published
2022-09-05
Title
WP Popup Builder < 1.3.0 - Subscriber+ Arbitrary Popup Deletion
Slug
wp-popup-builder
Published
2024-10-15
Title
WP Popup Builder – Popup Forms and Marketing Lead Generation < 1.3.6 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add
Slug
wp-popup-builder
Published
2025-09-27
Title
WP Popup Builder < 1.3.9 - Unauthenticated Information Exposure
Slug
wp-popup-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-popup-optin
Published
2026-04-21
Title
WP Responsive Popup + Optin <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'wpo_image_url' Parameter
Slug
wp-popups-lite
Published
2022-12-28
Title
WP Popups < 2.1.4.8 - Contributor+ Stored XSS
Slug
wp-popups-lite
Published
2023-01-23
Title
WP Popups < 2.1.4.9 - Contributor+ Stored XSS
Slug
wp-popups-lite
Published
2023-04-17
Title
WP Popups < 2.1.5.1 - Contributor+ Stored XSS
Slug
wp-popups-lite
Published
2024-03-15
Title
WP Popups < 2.1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-popups-lite
Published
2024-07-11
Title
WP Popups – WordPress Popup builder < 2.2.0.2 - Unauthenticated Full Path Disclosure
Slug
wp-popups-lite
Published
2026-01-11
Title
WP Popups < 2.2.0.6 - Missing Authorization
Slug
wp-portfolio-gallery
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
wp-post-author
Published
2024-05-06
Title
WP Post Author < 3.6.5 - Subscriber+ Rating Manipulation
Slug
wp-post-author
Published
2024-05-06
Title
WP Post Author < 3.7.5 - Missing Authorization
Slug
wp-post-author
Published
2024-06-20
Title
WP Post Author < 3.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-post-author
Published
2024-10-11
Title
Boost Your Blog's Engagement with WP Post Author < 3.8.2 - Authenticated (Administrator+) SQL Injection