WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-security-audit-log
Published
2026-02-14
Title
Activity Log < 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-security-audit-log
Published
2026-05-19
Title
WP Activity Log < 5.6.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-security-audit-log
Published
2026-06-19
Title
WP Activity Log < 5.6.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-security-audit-log
Published
2026-06-16
Title
WP Activity Log < 5.6.4 - Unauthenticated PHP Object Injection
Slug
wp-security-audit-log
Published
2026-07-23
Title
WP Activity Log < 5.6.5 - Cross-Site Request Forgery
Slug
wp-security-audit-log
Published
2026-09-30
Title
WP Activity Log < 5.6.7 - Authenticated (Administrator+) SQL Injection
Slug
wp-security-audit-log
Published
2026-10-30
Title
WP Activity Log < 5.6.2 - Unauthenticated Stored XSS
Slug
wp-security-audit-log-premium
Published
2024-04-09
Title
WP Activity Log Premium < 4.6.4.1 - Authenticated (Subscriber+) SQL Injection
Slug
wp-security-hardening
Published
2021-06-07
Title
WP Hardening < 1.2.2 - Reflected XSS via URI
Slug
wp-security-hardening
Published
2021-06-07
Title
WP Hardening < 1.2.2 - Reflected XSS via historyvalue
Slug
wp-security-hardening
Published
2024-09-17
Title
WP Hardening – Fix Your WordPress Security < 1.2.7 - Unauthenticated Security Feature Bypass to Username Enumeration
Slug
wp-security-master
Published
2025-06-05
Title
WP Security Master <= 1.0.2 - Cross-Site Request Forgery
Slug
wp-security-pro
Published
2022-06-06
Title
WordPress Security < 4.2.1 - Admin+ Stored Cross-Site Scripting
Slug
wp-security-questions
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
wp-security-questions
Published
2021-08-16
Title
WP Security Question <= 1.0.5 - Cross-Site Request Forgery
Slug
wp-security-scan
Published
2014-08-01
Title
Acunetix WP Security 4.0.3 - /wp-admin/admin.php wps-database Page Backup Generation CSRF Weakness
Slug
wp-sendfox
Published
2024-03-13
Title
WP SendFox < 1.3.1 - Missing Authorization
Slug
wp-sendfox
Published
2024-10-15
Title
WP SendFox <= 1.3.1 - Unauthenticated Information Disclosure
Slug
wp-sendgrid-mailer
Published
2024-08-26
Title
SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection
Slug
wp-sendgrid-mailer
Published
2024-10-17
Title
SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
Slug
wp-sendgrid-mailer
Published
2025-01-16
Title
SendGrid for WordPress <= 1.4 - Missing Authorization
Slug
wp-sendgrid-smtp
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
wp-sendsms
Published
2014-08-01
Title
WP-SendSMS - Setting Manipulation Cross-Site Request Forgery (CSRF)
Slug
wp-sendsms
Published
2014-08-01
Title
WP-SendSMS - Multiple Cross-Site Scripting (XSS)
Slug
wp-sentry
Published
2022-05-31
Title
WP Sentry <= 1.0 - Arbitrary Settings Update to Stored XSS via CSRF