WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-tiles
Published
2023-05-24
Title
WP Tiles <= 1.1.2 - Cross-Site Request Forgery
Slug
wp-time-capsule
Published
2020-01-14
Title
Backup and Staging by WP Time Capsule < 1.21.16 - Authentication Bypass
Slug
wp-time-capsule
Published
2021-12-21
Title
Backup and Staging by WP Time Capsule < 1.22.7 - Reflected Cross-Site Scripting
Slug
wp-time-capsule
Published
2024-07-13
Title
Backup and Staging by WP Time Capsule < 1.22.21 - Authentication Bypass to Account Takeover
Slug
wp-time-capsule
Published
2024-10-08
Title
Backup and Staging by WP Time Capsule < 1.22.22 - Authenticated (Contributor+) SQL Injection
Slug
wp-time-capsule
Published
2024-10-21
Title
Backup and Staging by WP Time Capsule < 1.22.22 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-time-capsule
Published
2024-11-15
Title
Backup and Staging by WP Time Capsule < 1.22.22 - Unauthenticated Arbitrary File Upload
Slug
wp-time-capsule
Published
2025-06-04
Title
Backup and Staging by WP Time Capsule < 1.22.24 - Reflected Cross-Site Scripting
Slug
wp-time-machine
Published
2025-04-01
Title
wp Time Machine <= 3.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-time-slots-booking-form
Published
2022-02-02
Title
WP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site Scripting
Slug
wp-time-slots-booking-form
Published
2023-01-20
Title
WP Time Slots Booking Form < 1.1.82 - Admin+ Stored XSS
Slug
wp-time-slots-booking-form
Published
2024-04-25
Title
WP Time Slots Booking Form < 1.2.07 - Unauthenticated Price Manipulation
Slug
wp-time-slots-booking-form
Published
2024-06-06
Title
WP Time Slots Booking Form < 1.2.11 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-time-slots-booking-form
Published
2024-06-06
Title
WP Time Slots Booking Form < 1.2.12 - Missing Authorization
Slug
wp-time-slots-booking-form
Published
2025-06-05
Title
WP Time Slots Booking Form < 1.2.31 - Cross-Site Request Forgery
Slug
wp-time-slots-booking-form
Published
2025-12-20
Title
Time Slots Booking Form < 1.2.40 - Missing Authorization
Slug
wp-time-slots-booking-form
Published
2026-03-02
Title
Time Slots Booking Form < 1.2.43 - Missing Authorization
Slug
wp-timed-popup
Published
2014-12-14
Title
Timed Popup <= 1.3 - CSRF & Stored XSS
Slug
wp-timelines
Published
2024-09-25
Title
WP Timeline – Vertical and Horizontal timeline plugin < 3.6.8 - Reflected Cross-Site Scripting
Slug
wp-timelines
Published
2024-09-25
Title
WP Timeline – Vertical and Horizontal timeline plugin < 3.6.8 - Unauthenticated Local File Inclusion
Slug
wp-timelines
Published
2024-09-25
Title
WP Timeline – Vertical and Horizontal timeline plugin < 3.6.8 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-tithely
Published
2024-11-25
Title
Tithe.ly Giving Button <= 1.1 - Contributor+ Stored XSS via Shortcode
Slug
wp-tmkm-amazon
Published
2014-06-12
Title
WP Tmkm Amazon < 1.5.3 - XSS
Slug
wp-to-buffer
Published
2021-09-20
Title
WordPress to Hootsuite (< 1.3.9) & Buffer (< 3.7.5) - Reflected Cross-Site Scripting
Slug
wp-to-hootsuite
Published
2021-09-20
Title
WordPress to Hootsuite (< 1.3.9) & Buffer (< 3.7.5) - Reflected Cross-Site Scripting