WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp2leads
Published
2024-12-24
Title
WP2LEADS < 3.3.4 - Reflected Cross-Site Scripting
Slug
wp2leads
Published
2025-03-27
Title
WP2LEADS < 3.4.7 - Reflected Cross-Site Scripting
Slug
wp2leads
Published
2025-05-15
Title
WP2LEADS < 3.5.1 - Cross-Site Request Forgery
Slug
wp2leads
Published
2025-06-15
Title
WP2LEADS < 3.5.1 - Reflected Cross-Site Scripting
Slug
wp2speed
Published
2024-07-08
Title
WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Improper Authorization due to use of Hardcoded Credentials
Slug
wp2speed
Published
2024-07-09
Title
WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Unauthenticated Information Exposure
Slug
wp2syslog
Published
2023-02-21
Title
wp2syslog <= 1.0.5 - Admin+ Stored XSS
Slug
wp2wb
Published
2025-03-24
Title
WordPres 同步微博 <= 1.1.0 - Cross-Site Request Forgery
Slug
wp3d-model-import-block
Published
2025-12-12
Title
WP3D Model Import Viewer <= 1.0.7 - Authenticated (Contributor+) Arbitrary File Upload
Slug
wpSS
Published
2014-08-01
Title
Spreadsheet <= 0.6 - SQL Injection
Slug
wpSS
Published
2014-08-06
Title
wpSS <= 0.62 - SQL Injection & XSS
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox - Multiple Vulnerabilities
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - thumb.php src Parameter Malformed Input Path Disclosure
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - thumb.php src Parameter XSS
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - rokbox.php Direct Request Path Disclosure
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - error_log Direct Request Error Log Information Disclosure
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - jwplayer/jwplayer.swf abouttext Parameter XSS
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - thumb.php src Parameter Arbitrary File Upload
Slug
wp_rokintroscroller
Published
2014-08-01
Title
RokIntroScroller <= 1.8 - XSS,DoS,Disclosure,Upload Vulnerabilities
Slug
wp_rokmicronews
Published
2014-08-01
Title
RokMicroNews <= 1.5 - XSS,DoS,Disclosure,Upload Vulnerabilities
Slug
wp_roknewspager
Published
2014-08-01
Title
RokNewsPager <= 1.17 - XSS,DoS,Disclosure,Upload Vulnerabilities
Slug
wp_rokstories
Published
2014-08-01
Title
RokStories <= 1.25 - XSS,DoS,Disclosure,Upload Vulnerabilities
Slug
wp_scraper
Published
2025-12-31
Title
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Server-Side Request Forgery
Slug
wp_visitorstracker
Published
2024-06-06
Title
WP Visitors Tracker < 2.4 - Reflected Cross-Site Scripting
Slug
wpa-seo-auto-linker
Published
2025-09-05
Title
SEO Auto Linker <= 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting