WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-print-friendly
Published
2014-08-01
Title
WP Print Friendly <= 0.5.2 - Security Bypass
Slug
wp-private-content-plus
Published
2019-08-27
Title
WP Private Content Plus < 2.0 - Unauthenticated Options Change
Slug
wp-private-content-plus
Published
2021-02-22
Title
WP Content Plus < 3.2 - CSRF Nonce Bypass
Slug
wp-private-content-plus
Published
2021-03-01
Title
WP Private Content Plus < 3.2 - Cross-Site Request Forgery
Slug
wp-private-content-plus
Published
2024-02-27
Title
WP Private Content Plus < 3.6.1 - Unauthenticated Protected Post Access
Slug
wp-private-content-plus
Published
2024-12-05
Title
WP Private Content Plus < 3.6.2 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
wp-private-content-plus
Published
2025-08-11
Title
WP Private Content Plus <= 3.6.2 - Unauthenticated Sensitive Information Exposure
Slug
wp-private-content-plus
Published
2025-09-19
Title
WP Private Content Plus <= 3.6.2 - Password Protection Bypass
Slug
wp-private-media
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-private-media
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-private-media
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-private-message
Published
2023-01-30
Title
WP Private Message < 1.0.6 - Private Message Disclosure via IDOR
Slug
wp-private-messages
Published
2014-08-01
Title
wp-private-messages - /wp-admin/profile.php msgid Parameter SQL Injection
Slug
wp-private-messages
Published
2016-12-12
Title
WP Private Messages 1.0.1 – Authenticated SQL Injection
Slug
wp-pro-counter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-pro-counter
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-pro-quiz
Published
2020-06-22
Title
WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via CSRF
Slug
wp-product-feed-manager
Published
2024-03-16
Title
WooCommerce Google Feed Manager < 2.3.0 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Slug
wp-product-feed-manager
Published
2024-04-15
Title
WooCommerce Google Feed Manager < 2.6.0 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
Slug
wp-product-feed-manager
Published
2024-08-22
Title
WooCommerce Google Feed Manager < 2.9.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Feed Actions
Slug
wp-product-gallery-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-product-review
Published
2020-05-14
Title
WP Product Review < 3.7.6 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
wp-profitshare
Published
2025-03-24
Title
WP Profitshare <= 1.4.9 - Authenticated (Editor+) SQL Injection
Slug
wp-profitshare
Published
2025-04-01
Title
WP Profitshare <= 1.4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-programmmanager
Published
2025-02-26
Title
WP Programmmanager <= 1.2 - Reflected XSS