WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wpsynchro
Published
2023-09-01
Title
WP Synchro < 1.10.0 - Settings Update via CSRF
Slug
wpsynchro
Published
2024-04-11
Title
WP Migration Plugin DB & Files – WP Synchro < 1.11.3 - Cross-Site Request Forgery
Slug
wpsyncsheets-woocommerce
Published
2025-02-03
Title
Export Order, Product, Customer & Coupon for WooCommerce to Google Sheets < 1.9 - Missing Authorization
Slug
wpsyncsheets-wpforms
Published
2025-02-11
Title
WPSyncSheets Lite For WPForms – WPForms Google Spreadsheet Addon < 1.6.1 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
Slug
wpt-whatsapp
Published
2025-04-17
Title
WhatsApp Click to Chat Plugin for WordPress <= 2.2.12 - Unauthenticated Local File Inclusion
Slug
wptables
Published
2023-06-05
Title
WordPress Tables <= 1.3.9 - Reflected XSS
Slug
wptelegram-widget
Published
2024-08-16
Title
WP Telegram Widget and Join Link < 2.1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wptelegram-widget
Published
2025-12-22
Title
Telegram Widget and Join Link < 2.2.13 - Missing Authorization
Slug
wptemplata
Published
2025-02-23
Title
WP Templata < 1.0.8 - Reflected Cross-Site Scripting
Slug
wptf-image-gallery
Published
2015-07-18
Title
wptf-image-gallery 1.0.3 - Remote File Download
Slug
wptobe-memberships
Published
2025-08-22
Title
Wptobe-memberships <= 3.4.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
wptobe-signinup
Published
2025-04-03
Title
Wptobe-signinup <= 1.1.2 - Reflected Cross-Site Scripting
Slug
wptools
Published
2022-11-21
Title
WPTools < 3.43 - Subscriber+ Arbitrary Plugin Installation
Slug
wptools
Published
2025-04-16
Title
WP Tools < 5.19 - Cross-Site Request Forgery to Arbitrary File Renaming
Slug
wptools
Published
2025-06-05
Title
WP Tools < 5.25 - Cross-Site Request Forgery
Slug
wptools-masonry-gallery-posts-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wptools-masonry-gallery-posts-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wptouch
Published
2014-08-01
Title
WPtouch 3.x - Insecure Nonce Generation
Slug
wptouch
Published
2014-08-01
Title
WPtouch 1.9.27 - 'wptouch_redirect' Parameter URI Redirection
Slug
wptouch
Published
2014-08-01
Title
WPtouch 1.9.19.4 - Cross-Site Scripting (XSS)
Slug
wptouch
Published
2014-08-01
Title
WPtouch 1.9.8 - ajax/file_upload.php Crafted Content-Type File Upload Remote Code Execution
Slug
wptouch
Published
2014-08-01
Title
WPtouch 1.9.8 - include/submit.php Multiple Parameter SQL Injection
Slug
wptouch
Published
2015-01-29
Title
WPtouch < 3.7 - Unvalidated Open Redirect
Slug
wptouch
Published
2015-04-20
Title
WPtouch Mobile Plugin < 3.7.6 - Cross-Site Scripting (XSS)
Slug
wptouch
Published
2022-08-29
Title
WPtouch < 4.3.44 - Reflected Cross-Site Scripting