WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-webinarsystem
Published
2025-10-19
Title
WebinarPress <= 1.33.28 - Missing Authorization
Slug
wp-website-creator
Published
2024-11-08
Title
Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-weixin-robot
Published
2024-12-12
Title
WP微信机器人 <= 5.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-whatsapp
Published
2023-12-26
Title
WP Chat App < 3.4.5 - Admin+ Stored XSS
Slug
wp-whatsapp
Published
2024-03-06
Title
WP Chat App < 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
Slug
wp-whatsapp
Published
2024-03-29
Title
WP Chat App < 3.6.3 - Contributor+ Stored XSS
Slug
wp-whatsapp
Published
2024-04-05
Title
WP Chat App < 3.6.4 - Admin+ Stored XSS
Slug
wp-whatsapp
Published
2024-06-06
Title
WP Chat App < 3.6.5 - Admin+ Stored XSS
Slug
wp-whatsapp
Published
2024-11-15
Title
WP Chat App < 3.6.9 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation
Slug
wp-whatsapp-chat
Published
2022-07-26
Title
Social Chat < 6.0.5 - Admin+ Stored Cross-Site Scripting
Slug
wp-whois
Published
2014-08-01
Title
Whois Search <= 1.4.2 - Cross Site Scripting
Slug
wp-whois-domain
Published
2016-11-28
Title
WP Whois Domain <= 1.0.0 - Unauthenticated Cross-Site Scripting (XSS)
Slug
wp-whydonate
Published
2025-10-14
Title
WhyDonate – FREE Donate button – Crowdfunding – Fundraising < 4.0.16 - Missing Authorization to Unauthenticated wp_wdplugin_style Rww Deletion
Slug
wp-whydonate
Published
2025-10-20
Title
Whydonate < 4.0.16 - Missing Authorization
Slug
wp-widget-bundle
Published
2024-05-31
Title
Widget Bundle <= 2.0.0 - Admin+ Stored XSS
Slug
wp-widget-bundle
Published
2024-05-31
Title
Widget Bundle <= 2.0.0 - Widget Disable/Enable via CSRF
Slug
wp-widget-bundle
Published
2024-05-31
Title
Widget Bundle <= 2.0.0 - Unauthencated Reflected XSS
Slug
wp-widget-changer
Published
2026-01-06
Title
WP Widget Changer <= 1.2.5 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
wp-widgets-shortcode
Published
2025-09-22
Title
WordPress Widgets Shortcode <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-wiki-tooltip
Published
2025-02-18
Title
WP Wiki Tooltip < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-with-spritz
Published
2018-04-25
Title
WP with Spritz 1.0 - Unauthenticated File Inclusion
Slug
wp-wizard-cloak
Published
2025-06-13
Title
Wizard Cloak <= 1.0.1 - Reflected Cross-Site Scripting
Slug
wp-woo-commerce-sync-for-g-sheet
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-woocommerce-quickbooks
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
wp-woocommerce-quickbooks
Published
2025-04-16
Title
Integration for WooCommerce and QuickBooks < 1.3.2 - Cross-Site Request Forgery