WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-test-email
Published
2026-01-15
Title
Test Email <= 1.1.7 - Reflected Cross-Site Scripting
Slug
wp-testimonial-widget
Published
2024-08-20
Title
WP Testimonial Widget <= 3.1 - Missing Authorization
Slug
wp-testimonial-widget
Published
2024-08-26
Title
WP Testimonial Widget <= 3.1 - Authenticated (Admin+) SQL Injection
Slug
wp-testimonial-widget
Published
2024-08-26
Title
WP Testimonial Widget <= 3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-testimonial-with-widget
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Slug
wp-testimonials
Published
2017-06-02
Title
WP-Testimonials - Authenticated SQL Injection
Slug
wp-testing
Published
2022-04-26
Title
Psychological tests & quizzes <= 0.21.19 - Contributor+ Stored Cross-Site Scripting
Slug
wp-text-expander
Published
2025-06-05
Title
WP Text Expander <= 1.0.1 - Authenticated (Administrator+) SQL Injection
Slug
wp-text-slider-widget
Published
2025-12-25
Title
Text Slider Widget <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-thumb
Published
2025-06-19
Title
WPThumb <= 0.10 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
wp-thumbnail
Published
2025-10-21
Title
WP-Thumbnail <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-thumbtack-review-slider
Published
2025-08-27
Title
WP Thumbtack Review Slider < 2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-ticket
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
Slug
wp-ticket
Published
2021-09-20
Title
WP Ticket < 5.10.4 - Admin+ Stored Cross-Site Scripting
Slug
wp-ticket
Published
2025-08-25
Title
WP Ticket Customer Service Software & Support Ticket System < 6.0.3 - Unauthenticated PHP Object Injection
Slug
wp-ticket
Published
2025-09-26
Title
WP Ticket Customer Service Software & Support Ticket System < 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-ticket
Published
2025-09-23
Title
Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-ticket-ultra
Published
2024-09-24
Title
WP Ticket Ultra Help Desk & Support Plugin <= 1.0.5 - Unauthenticated Local File Inclusion
Slug
wp-ticketbai
Published
2025-05-14
Title
TicketBAI Facturas para WooCommerce < 3.19 - Unauthenticated Arbitrary File Deletion
Slug
wp-ticketbai
Published
2025-06-05
Title
TicketBAI Facturas para WooCommerce <= 3.45 - Missing Authorization
Slug
wp-ticketbai
Published
2025-06-09
Title
TicketBAI Facturas para WooCommerce < 3.21 - Unauthenticated SQL Injection
Slug
wp-tiger
Published
2014-08-01
Title
vTiger - CRM Lead Capture Unspecified
Slug
wp-tiktok-feed
Published
2025-12-31
Title
QuadLayers TikTok Feed <= 4.6.4 - Missing Authorization
Slug
wp-tiles
Published
2023-03-16
Title
WP Tiles <= 1.1.2 - Contributor+ Stored XSS
Slug
wp-tiles
Published
2023-03-16
Title
WP Tiles <= 1.1.2 - Subscriber+ Draft/Private Post Title Disclosure