WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wps-telegram-chat
Published
2024-10-24
Title
WPS Telegram Chat <= 4.6.0 - Missing Authorization to Information Exposure
Slug
wps-telegram-chat
Published
2024-10-24
Title
WPS Telegram Chat <= 4.6.0 - Authenticated (Subscriber+) Unauthorized Access to Telegram Bot API
Slug
wps-visitor-counter
Published
2025-11-21
Title
WPS Visitor Counter Plugin <= 1.4.8 - Reflected XSS via $_SERVER['REQUEST_URI']
Slug
wpsc-mijnpress
Published
2014-08-01
Title
WPsc MijnPress - 'rwflush' Parameter Cross Site Scripting
Slug
wpschoolpress
Published
2021-10-11
Title
WPSchoolPress < 2.1.17 - Multiple Admin+ Stored Cross-Site Scripting
Slug
wpschoolpress
Published
2021-10-11
Title
WPSchoolPress < 2.1.10 - Reflected Cross-Site Scripting
Slug
wpschoolpress
Published
2021-10-11
Title
WPSchoolPress < 2.1.10 - Multiple Authenticated SQL Injections
Slug
wpschoolpress
Published
2023-09-25
Title
WPSchoolPress < 2.2.5 - Teacher+ SQLi
Slug
wpschoolpress
Published
2023-09-18
Title
WPSchoolPress < 2.2.5 - Cross-Site Request Forgery
Slug
wpschoolpress
Published
2024-10-25
Title
School Management System – WPSchoolPress < 2.2.11 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation
Slug
wpschoolpress
Published
2025-01-06
Title
School Management System – WPSchoolPress < 2.2.15 - Student/Parent+ SQL Injection
Slug
wpschoolpress
Published
2025-03-14
Title
School Management System – WPSchoolPress < 2.2.18 - Teacher+ SQL Injection
Slug
wpschoolpress
Published
2025-03-14
Title
School Management System – WPSchoolPress < 2.2.17 - Teacher+ Privilege Escalation
Slug
wpschoolpress
Published
2025-03-14
Title
School Management System – WPSchoolPress < 2.2.17 - Parent+ SQL Injection
Slug
wpschoolpress
Published
2025-03-14
Title
School Management System – WPSchoolPress < 2.2.17 - Missing Authorization to Arbitrary User Deletion
Slug
wpschoolpress
Published
2025-11-13
Title
School Management System – WPSchoolPress < 2.2.24 - Authenticated (Administrator+) SQL Injection
Slug
wpsection
Published
2024-08-07
Title
WPSection < 1.3.9 - Authenticated (Contributor+) Local File Inlcusion
Slug
wpseo-local
Published
2023-05-24
Title
Yoast SEO: Local < 15.0 - Contributor+ Stored XSS
Slug
wpseo-local
Published
2023-05-09
Title
Yoast SEO: Local < 14.9 - Reflected XSS
Slug
wpseo-local
Published
2023-05-09
Title
Yoast SEO: Local < 14.9 - CSRF
Slug
wpseo-local
Published
2023-05-24
Title
Yoast SEO: Local < 15.0 - Contributor+ Stored XSS
Slug
wpshapere-lite
Published
2025-06-27
Title
WPShapere - WordPress admin theme <= 1.4.1 - Cross-Site Request Forgery
Slug
wpshare247-elementor-addons
Published
2025-04-01
Title
WPSHARE247 Elementor Addons <= 2.5 - Contributor+ Stored XSS
Slug
wpshop
Published
2015-03-09
Title
Wpshop - eCommerce <= 1.3.9.5 - Arbitrary File Upload
Slug
wpshop
Published
2025-04-09
Title
WP shop <= 2.6.1 - Arbitrary File Upload via CSRF