WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-post-author
Published
2024-12-30
Title
WP Post Author < 3.8.3 - Authenticated (Administrator+) SQL Injection
Slug
wp-post-author
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
wp-post-author
Published
2026-06-26
Title
WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars < 3.10.0 - Authenticated (Contributor+) SQL Injection
Slug
wp-post-block
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-post-category-notifications
Published
2025-01-16
Title
WP Post Category Notifications <= 1.0 - Reflected Cross-Site Scripting
Slug
wp-post-columns
Published
2023-10-22
Title
WP Post Columns <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-post-corrector
Published
2025-01-14
Title
WP Post Corrector <= 1.0.2 - Reflected Cross-Site Scripting
Slug
wp-post-corrector
Published
2025-06-05
Title
WP Post Corrector <= 1.0.2 - Authenticated (Administrator+) SQL Injection
Slug
wp-post-disclaimer
Published
2024-03-25
Title
WP Post Disclaimer < 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-post-hide
Published
2025-07-16
Title
WP Post Hide < 1.1.0 - Cross-Site Request Forgery
Slug
wp-post-list-table
Published
2025-01-29
Title
WP Post List Table < 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-post-modal
Published
2023-10-27
Title
WP Post Popup <= 3.7.3 - Admin+ Stored XSS
Slug
wp-post-modules-el
Published
2025-05-20
Title
WP Post Modules for Elementor <= 2.5.0 - Reflected Cross-Site Scripting
Slug
wp-post-page-clone
Published
2020-04-25
Title
Duplicate Page and Post < 2.5.7 & WP Post Page Clone < 1.1 - SQL Injections due to Duplicated Snippets
Slug
wp-post-page-clone
Published
2021-12-27
Title
WP Post Page Clone < 1.2 - Unauthorised Post Access
Slug
wp-post-signature
Published
2025-12-31
Title
Post Signature <= 0.4.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
wp-post-styling
Published
2022-05-31
Title
WP Post Styling < 1.3.1 - Multiple CSRF
Slug
wp-post-to-pdf
Published
2014-08-01
Title
WP Post to PDF 2.3.1 - wp-admin/options.php wpptopdf headerFontSize Parameter XSS
Slug
wp-post-to-pdf-enhanced
Published
2025-04-17
Title
WP Post to PDF Enhanced <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-postratings
Published
2011-10-06
Title
WP Postratings < 1.62 - Authenticated SQL Injection
Slug
wp-postratings
Published
2020-12-24
Title
WP Postratings < 1.86.1 - Admin+ Stored Cross-Site Scripting
Slug
wp-postratings
Published
2022-08-31
Title
WP-PostRatings < 1.90 - Ratings Tempering via Race Condition
Slug
wp-postratings
Published
2024-08-01
Title
WP-PostRatings < 1.91.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-postratings-cheater
Published
2025-02-24
Title
WP-PostRatings Cheater <= 1.5 - Cross-Site Request Forgery
Slug
wp-posts-carousel
Published
2025-03-01
Title
WP Posts Carousel < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play_timeout Parameter