WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wpappninja
Published
2024-06-06
Title
WPMobile.App — Android and iOS Mobile Application < 11.42 - Reflected Cross-Site Scripting
Slug
wpappninja
Published
2024-08-26
Title
WPMobile.App < 11.49 - Reflected Cross-Site Scripting
Slug
wpappninja
Published
2024-09-30
Title
WPMobile.App < 11.51 - Reflected Cross-Site Scripting
Slug
wpappninja
Published
2024-12-12
Title
WPMobile.App — Android and iOS Mobile Application < 11.53 - Unauthenticated Arbitrary Shortcode Execution
Slug
wpappninja
Published
2025-02-19
Title
WPMobile.App < 11.57 - Open Redirect via 'redirect' Parameter
Slug
wpappninja
Published
2025-10-26
Title
WPMobile.App < 11.72 - Unauthenticated Stored Cross-Site Scripting
Slug
wpaudio-mp3-player
Published
2023-02-13
Title
WPaudio MP3 Player <= 4.0.2 - Contributor+ Stored XSS
Slug
wpavatar
Published
2025-08-25
Title
WPAvatar <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpb-advanced-faq
Published
2023-02-22
Title
WPB Advanced FAQ <= 1.0.6 - Contributor+ Stored XSS
Slug
wpb-elementor-addons
Published
2024-05-17
Title
WPB Elementor Addons < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpb-elementor-addons
Published
2024-05-21
Title
WPB Elementor Addons < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
Slug
wpb-elementor-addons
Published
2024-05-29
Title
WPB Elementor Addons < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpb-elementor-addons
Published
2025-09-05
Title
WPB Elementor Addons <= 1.7 - Contributor+ Stored XSS
Slug
wpb-image-widget
Published
2025-09-05
Title
WPB Image Widget <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpb-popup-for-contact-form-7
Published
2024-11-18
Title
WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup < 1.7.6 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form
Slug
wpb-show-core
Published
2022-10-13
Title
WPB Show Core <= 2.2 - Reflected Cross-Site Scripting
Slug
wpb-show-core
Published
2023-11-06
Title
WPB Show Core <= 2.2 - Unauthenticated Local File Inclusion
Slug
wpb-show-core
Published
2023-11-06
Title
WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
Slug
wpb-show-core
Published
2024-03-18
Title
WPB Show Core < 2.6 - Reflected XSS
Slug
wpb-show-core
Published
2024-03-18
Title
WPB Show Core < 2.7 - Reflected XSS
Slug
wpb-show-core
Published
2024-03-18
Title
WPB Show Core < 2.7 - Reflected XSS
Slug
wpb-woocommerce-category-slider
Published
2025-06-27
Title
WPB Category Slider for WooCommerce <= 1.71 - Authenticated (Contributor+) Local File Inclusion
Slug
wpbenchmark
Published
2024-04-10
Title
WordPress Hosting Benchmark tool < 1.3.7 - Cross-Site Request Forgery via execute_plugin()
Slug
wpbits-addons-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wpbits-addons-for-elementor
Published
2024-03-19
Title
WPBITS Addons For Elementor Page Builder < 1.5 - Contributor+ Stored XSS