WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-table-builder
Published
2026-01-08
Title
WP Table Builder < 2.0.20 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Table Creation
Slug
wp-table-editor
Published
2025-01-30
Title
Table Editor < 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-table-editor
Published
2025-08-25
Title
Table Editor <= 1.6.4 - Cross-Site Request Forgery
Slug
wp-table-manager
Published
2023-01-27
Title
WP Table Manager < 3.5.3 - Contributor+ Stored XSS
Slug
wp-table-manager
Published
2025-02-11
Title
WP Table Manager < 4.1.4 - Missing Authorization to Authenticated (Subscriber+) Directory Traversal to Folder/File Name Disclosure
Slug
wp-table-pixie
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-table-reloaded
Published
2014-08-01
Title
wp-table-reloaded <= 1.9.3 - zeroclipboard.swf id Parameter XSS
Slug
wp-table-reloaded
Published
2022-12-14
Title
WP Table Reloaded <= 1.9.4 - Contributor+ Stored XSS
Slug
wp-tactical-popup
Published
2025-09-16
Title
Tactical Popup <= 1.1 - Reflected Cross-Site Scripting
Slug
wp-tao
Published
2025-06-11
Title
Track, Analyze & Optimize by WP Tao < 1.3.1 - Reflected Cross-Site Scripting
Slug
wp-tarteaucitron-js-self-hosted
Published
2025-02-24
Title
WP tarteaucitron.js Self Hosted <= 1.2.4 - Running a Vulnerable Dependency
Slug
wp-taxonomy-import
Published
2022-08-22
Title
WP Taxonomy Import <= 1.0.4 - Reflected Cross-Site Scripting
Slug
wp-team-manager
Published
2022-06-14
Title
WordPress Team Manager < 2.0.1 - Contributor+ Stored Cross-Site Scripting
Slug
wp-team-manager
Published
2024-07-11
Title
WordPress Team Manager < 2.1.13 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-team-manager
Published
2025-03-27
Title
Team Manager < 2.2.0 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-team-manager
Published
2025-09-22
Title
Team Manager <= 2.5.1 - Missing Authorization
Slug
wp-team-showcase-and-slider
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Slug
wp-tell-a-friend-popup-form
Published
2023-09-04
Title
wp tell a friend popup form <= 7.1 - Admin+ Stored XSS
Slug
wp-tell-a-friend-popup-form
Published
2023-07-26
Title
WP Tell a Friend Popup Form <= 7.1 - Settings Update via CSRF
Slug
wp-term-order
Published
2026-01-24
Title
Term Order < 2.2.0 - Cross-Site Request Forgery
Slug
wp-terms-popup
Published
2023-01-23
Title
WP Terms Popup < 2.6.1 - Admin+ Stored XSS
Slug
wp-terms-popup
Published
2026-03-20
Title
WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups < 2.11.0 - Missing Authorization
Slug
wp-tesseract
Published
2025-09-26
Title
WP Tesseract <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-test-email
Published
2024-09-12
Title
WP Test Email < 1.1.8 - Reflected Cross-Site Scripting
Slug
wp-test-email
Published
2025-03-14
Title
WP Test Email < 1.1.9 - Unauthenticated Stored Cross-Site Scripting