WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ws-force-login-page
Published
2025-04-24
Title
WS Force Login Page < 3.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ws-form
Published
2022-01-31
Title
WS Form < 1.8.176 - Unauthenticated Stored Cross-Site Scripting
Slug
ws-form
Published
2022-01-31
Title
WS Form < 1.8.176 - Admin+ Stored Cross-Site Scripting
Slug
ws-form
Published
2023-12-28
Title
WS Form LITE < 1.9.171 - Authenticated(Administrator+) SQL Injection
Slug
ws-form
Published
2024-06-06
Title
WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection
Slug
ws-form
Published
2024-09-25
Title
WS Form LITE < 1.9.244 - Unauthenticated Stored Cross-Site Scripting
Slug
ws-form
Published
2024-11-05
Title
WS Form LITE – Drag & Drop Contact Form Builder for WordPress < 1.9.245 - Reflected Cross-Site Scripting via URL
Slug
ws-form
Published
2025-01-27
Title
WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting
Slug
ws-form
Published
2025-04-24
Title
WS Form LITE – Drag & Drop Contact Form Builder for WordPress < 1.10.36 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Slug
ws-form
Published
2026-06-10
Title
WS Form LITE < 1.11.8 - Subscriber+ Arbitrary Settings Update
Slug
ws-form-pro
Published
2022-01-31
Title
WS Form < 1.8.176 - Unauthenticated Stored Cross-Site Scripting
Slug
ws-form-pro
Published
2022-01-31
Title
WS Form < 1.8.176 - Admin+ Stored Cross-Site Scripting
Slug
ws-form-pro
Published
2024-06-06
Title
WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection
Slug
ws-theme-addons
Published
2025-08-22
Title
WS Theme Addons <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ws_weather Shortcode
Slug
wsanalytics-google-analytics-and-dashboards
Published
2025-10-08
Title
WSAnalytics <= 1.1.2 - Reflected Cross-Site Scripting
Slug
wsb-brands
Published
2023-03-15
Title
WSB Brands < 1.2 - Admin+ Stored XSS
Slug
wschat-live-chat
Published
2025-11-18
Title
WSChat – WordPress Live Chat < 3.1.7 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
Slug
wsecure
Published
2016-08-02
Title
wSecure Lite <= 2.3 - Remote Code Execution (RCE)
Slug
wsecure
Published
2023-09-04
Title
wSecure Lite < 3.0 - Admin+ Stored XSS
Slug
wsify-widget
Published
2024-10-14
Title
Wsify Widget <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wsm-downloader
Published
2022-07-12
Title
WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download
Slug
wsm-downloader
Published
2022-07-12
Title
WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass
Slug
wt-display-breeze
Published
2025-04-24
Title
Breeze Display < 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via cal_size Parameter
Slug
wt-smart-coupons-for-woocommerce
Published
2025-10-30
Title
Smart Coupons for WooCommerce < 2.2.4 - Missing Authorization
Slug
wt-smart-coupons-for-woocommerce
Published
2026-05-15
Title
Smart Coupons For WooCommerce Coupons < 2.3.0 - Missing Authorization