WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-posts-carousel
Published
2025-03-28
Title
WP Posts Carousel < 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-posts-carousel
Published
2025-03-27
Title
WP Posts Carousel < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-posts-carousel
Published
2025-04-16
Title
WP Posts Carousel < 1.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-posts-carousel
Published
2025-05-29
Title
WP Posts Carousel < 1.3.13 - Authenticated (Contributor+) PHP Object Injection
Slug
wp-posts-re-order
Published
2026-03-20
Title
WP Posts Re-order <= 1.0 - Cross-Site Request Forgery to Settings Update
Slug
wp-posturl
Published
2022-06-01
Title
Add Post URL <= 2.1.0 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
wp-postviews
Published
2014-08-01
Title
WP-PostViews 1.62 - Setting Manipulation CSRF
Slug
wp-power-stats
Published
2023-10-03
Title
WP Power Stats <= 2.2.3 - CSRF
Slug
wp-powerplaygallery
Published
2014-08-01
Title
wp-powerplaygallery - Arbitrary File Upload
Slug
wp-powerplaygallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-powerplaygallery
Published
2015-07-01
Title
Powerplay Gallery - Arbitrary File Upload & SQL Injection
Slug
wp-prayer
Published
2021-06-30
Title
WP Prayer < 1.5.5 - Unauthorised AJAX call via CSRF
Slug
wp-prayer
Published
2021-05-17
Title
WP Prayer < 1.6.2 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wp-prayer
Published
2021-06-08
Title
WP Prayer < 1.6.7 - Arbitrary Plugin Settings Update via CSRF
Slug
wp-prayer
Published
2023-02-14
Title
WP Prayer < 1.9.7 - Admin+ Stored XSS
Slug
wp-prayer
Published
2021-06-08
Title
WP Prayer < 1.6.6 - Cross-Site Request Forgery
Slug
wp-prayer
Published
2024-04-24
Title
WP Prayer <= 2.0.9 - Arbitrary Prayer Deletion via CSRF
Slug
wp-prayer
Published
2024-04-24
Title
WP Prayer <= 2.0.9 - Settings Update via CSRF
Slug
wp-prayer
Published
2024-04-24
Title
WP Prayer <= 2.0.9 - Email Settings Update via CSRF
Slug
wp-prayers-request
Published
2024-05-24
Title
WP Prayer II < 2.4.8 - Settings Update via CSRF
Slug
wp-prayers-request
Published
2024-05-24
Title
WP Prayer II < 2.4.8 - Email Settings Update via CSRF
Slug
wp-predict
Published
2014-08-01
Title
WP-Predict 1.0 - Blind SQL Injection
Slug
wp-pricing-table
Published
2025-02-04
Title
WP Pricing Table <= 1.1 - Reflected XSS
Slug
wp-print
Published
2014-08-01
Title
WP-Print 2.51 - Setting Manipulation CSRF
Slug
wp-print-friendly
Published
2014-08-01
Title
WP Print Friendly 3.3.7 - wp-admin/options.php printfriendly_option custom_image Parameter XSS