WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-thumbtack-review-slider
Published
2025-08-27
Title
WP Thumbtack Review Slider < 2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-ticket
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
Slug
wp-ticket
Published
2021-09-20
Title
WP Ticket < 5.10.4 - Admin+ Stored Cross-Site Scripting
Slug
wp-ticket
Published
2025-08-25
Title
WP Ticket Customer Service Software & Support Ticket System < 6.0.3 - Unauthenticated PHP Object Injection
Slug
wp-ticket
Published
2025-09-26
Title
WP Ticket Customer Service Software & Support Ticket System < 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-ticket
Published
2025-09-23
Title
Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-ticket
Published
2026-06-12
Title
WP Ticket < 6.0.5 - Unauthenticated SQL Injection via WordPress Search 's' Parameter
Slug
wp-ticket-ultra
Published
2024-09-24
Title
WP Ticket Ultra Help Desk & Support Plugin <= 1.0.5 - Unauthenticated Local File Inclusion
Slug
wp-ticketbai
Published
2025-05-14
Title
TicketBAI Facturas para WooCommerce < 3.19 - Unauthenticated Arbitrary File Deletion
Slug
wp-ticketbai
Published
2025-06-05
Title
TicketBAI Facturas para WooCommerce <= 3.45 - Missing Authorization
Slug
wp-ticketbai
Published
2025-06-09
Title
TicketBAI Facturas para WooCommerce < 3.21 - Unauthenticated SQL Injection
Slug
wp-tiger
Published
2014-08-01
Title
vTiger - CRM Lead Capture Unspecified
Slug
wp-tiktok-feed
Published
2025-12-31
Title
QuadLayers TikTok Feed <= 4.6.4 - Missing Authorization
Slug
wp-tiles
Published
2023-03-16
Title
WP Tiles <= 1.1.2 - Contributor+ Stored XSS
Slug
wp-tiles
Published
2023-03-16
Title
WP Tiles <= 1.1.2 - Subscriber+ Draft/Private Post Title Disclosure
Slug
wp-tiles
Published
2023-05-24
Title
WP Tiles <= 1.1.2 - Cross-Site Request Forgery
Slug
wp-time-capsule
Published
2020-01-14
Title
Backup and Staging by WP Time Capsule < 1.21.16 - Authentication Bypass
Slug
wp-time-capsule
Published
2021-12-21
Title
Backup and Staging by WP Time Capsule < 1.22.7 - Reflected Cross-Site Scripting
Slug
wp-time-capsule
Published
2024-07-13
Title
Backup and Staging by WP Time Capsule < 1.22.21 - Authentication Bypass to Account Takeover
Slug
wp-time-capsule
Published
2024-10-08
Title
Backup and Staging by WP Time Capsule < 1.22.22 - Authenticated (Contributor+) SQL Injection
Slug
wp-time-capsule
Published
2024-10-21
Title
Backup and Staging by WP Time Capsule < 1.22.22 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-time-capsule
Published
2024-11-15
Title
Backup and Staging by WP Time Capsule < 1.22.22 - Unauthenticated Arbitrary File Upload
Slug
wp-time-capsule
Published
2025-06-04
Title
Backup and Staging by WP Time Capsule < 1.22.24 - Reflected Cross-Site Scripting
Slug
wp-time-capsule
Published
2026-05-30
Title
Backup and Staging by WP Time Capsule < 1.22.26 - Missing Authorization
Slug
wp-time-capsule
Published
2026-07-08
Title
Backup and Staging by WP Time Capsule < 1.22.27 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via download_recent_decrypted_file_wptc Function