WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-page-widget
Published
2022-09-26
Title
WP Page Widget < 4.0 - Settings Update via CSRF
Slug
wp-pagebuilder
Published
2021-03-17
Title
WP Page Builder < 1.2.4 - Insecure default configuration Allows Subscribers Editing Access to Posts
Slug
wp-pagebuilder
Published
2021-03-17
Title
WP Page Builder < 1.2.4 - Multiple Stored Cross-Site scripting (XSS)
Slug
wp-pagebuilder
Published
2022-11-10
Title
WP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site
Slug
wp-pagebuilder
Published
2022-10-21
Title
WP Page Builder < 1.2.7 - Author+ Stored XSS
Slug
wp-paginate
Published
2021-01-05
Title
WP Paginate < 2.1.4 - Admin+ Stored Cross-Site Scripting
Slug
wp-paginate
Published
2022-06-16
Title
WP Paginate < 2.1.9 - Admin+ Stored Cross-Site Scripting
Slug
wp-pagseguro-payments
Published
2024-11-08
Title
WP PagSeguro Payments <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-pano
Published
2025-01-14
Title
wp-pano <= 1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-panoramio
Published
2025-01-22
Title
WP Panoramio <= 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-parallax-content-slider
Published
2025-03-24
Title
WP Parallax Content Slider <= 0.9.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-parsidate
Published
2023-01-23
Title
Parsi Date < 4.0.2 - Reflected Cross-Site Scripting
Slug
wp-parsidate
Published
2024-11-25
Title
Parsi Date < 5.1.2 - Reflected Cross-Site Scripting via add_query_arg Parameter
Slug
wp-payeezy-pay
Published
2018-12-07
Title
WP Payeezy Pay < 2.98 - Local File Inclusion
Slug
wp-payment-form
Published
2022-08-10
Title
Best Payments Plugin for WP < 4.2.1 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-payment-form
Published
2022-08-10
Title
Best Payments Plugin for WP < 4.2.1 - Reflected Cross-Site Scripting
Slug
wp-payment-form
Published
2026-04-29
Title
Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management < 4.6.20 - Missing Authorization
Slug
wp-paypal
Published
2025-01-16
Title
Payment Button for PayPal < 1.2.3.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-paypal
Published
2026-01-16
Title
Payment Button for PayPal < 1.2.3.42 - Missing Authorization to Unauthenticated Arbitrary Order Creation
Slug
wp-paypal
Published
2026-08-05
Title
Payment Button for PayPal < 1.2.3.45 - Unauthenticated Payment Price Manipulation
Slug
wp-paytm-pay
Published
2021-07-24
Title
Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection
Slug
wp-pdf-generator
Published
2023-07-17
Title
WP PDF Generator < 1.2.3 - Cross-Site Request Forgery
Slug
wp-perfect-plugin
Published
2024-11-01
Title
W3P SEO < 1.8.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-performance-pack
Published
2025-03-11
Title
WP Performance Pack < 2.5.4 - Missing Authorization
Slug
wp-performance-pack
Published
2025-04-09
Title
WP Performance Pack <= 2.5.4 - Cross-Site Request Forgery