WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wupo-group-attributes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wux-blog-editor
Published
2024-10-25
Title
Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload
Slug
wux-blog-editor
Published
2024-10-25
Title
Wux Blog Editor <= 3.0.0 - Authentication Bypass to Administrator
Slug
wwc-amz-aff
Published
2015-04-25
Title
WooCommerce Amazon Affiliates - Arbitrary File Upload
Slug
wwm-social-share-on-image-hover
Published
2023-10-02
Title
WWM Social Share On Image Hover <= 2.2 - Admin+ Stored XSS
Slug
www-xml-sitemap-generator-org
Published
2022-05-02
Title
Google XML Sitemap Generator < 2.0.4 - Reflected Cross-Site Scripting
Slug
wxsync
Published
2023-09-04
Title
WxSync < 2.8.1 - Contributor+ Stored XSS
Slug
wysija-newsletters
Published
2014-08-01
Title
MailPoet Newsletters 2.6.6 - Theme File Upload H&ling Remote Code Execution
Slug
wysija-newsletters
Published
2014-08-01
Title
Wysija Newsletters 2.2 - SQL Injection
Slug
wysija-newsletters
Published
2014-08-01
Title
Wysija Newsletters - swfupload Cross-Site Scripting
Slug
wysija-newsletters
Published
2014-09-21
Title
MailPoet Newsletters 2.6.7 - helpers/back.php page Parameter Unspecified Issue
Slug
wysija-newsletters
Published
2014-09-21
Title
MailPoet Newsletters 2.6.10 - Unspecified CSRF
Slug
wysija-newsletters
Published
2016-02-02
Title
MailPoet Newsletters < 2.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
wysija-newsletters
Published
2016-09-10
Title
MailPoet Newsletters <= 2.7.2 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
wysija-newsletters
Published
2016-09-11
Title
MailPoet Newsletters <= 2.7.2 - SQL Injection
Slug
wysija-newsletters
Published
2018-03-14
Title
MailPoet Newsletters < 2.8.2 - Spam Vulnerability