WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wpqa
Published
2024-06-12
Title
WPQA < 6.1.1 - Contributor+ Stored XSS
Slug
wpquiz
Published
2025-07-03
Title
WPQuiz <= 0.4.2 - Authenticated (Contributor+) SQL Injection
Slug
wpr-addons-pro
Published
2026-04-16
Title
Royal Elementor Addons < 1.7.1041 - Unauthenticated Stored Cross-Site Scripting
Slug
wpr-admin-amplify
Published
2024-11-04
Title
Admin Amplify <= 1.3.0 - Reflected Cross-Site Scripting
Slug
wpradio
Published
2025-01-30
Title
WPRadio – WordPress Radio Streaming Plugin < 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wprecovery
Published
2025-10-02
Title
WPRecovery <= 2.0 - Unauthenticated SQL Injection to Arbitrary File Deletion
Slug
wpremote
Published
2021-11-29
Title
WP Remote < 4.65 - Reflected Cross-Site Scripting
Slug
wpremote
Published
2026-08-24
Title
BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery
Slug
wprequal
Published
2025-02-17
Title
Mortgage Lead Capture System < 8.3.1 - Cross-Site Request Forgery to Settings Reset
Slug
wpresidence-core
Published
2026-01-17
Title
Wpresidence Core <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wps-bidouille
Published
2019-07-23
Title
WPS Bidouille < 1.12.4 - Multiple Issues
Slug
wps-bidouille
Published
2025-12-02
Title
WPS Bidouille < 1.33.2 - Missing Authorization
Slug
wps-bidouille
Published
2026-08-17
Title
WPS Bidouille < 1.33.5 - Subscriber+ User Email Disclosure via wps_get_users
Slug
wps-child-theme-generator
Published
2019-07-23
Title
WPS Child Themes Generator <= 1.1 - Path Traversal
Slug
wps-cleaner
Published
2019-07-23
Title
WPS Cleaner <= 1.4.4 - Multiple Issues
Slug
wps-hide-login
Published
2015-04-27
Title
WPS Hide Login 1.0 - CSRF
Slug
wps-hide-login
Published
2019-07-23
Title
WPS Hide Login < 1.5.3 - Multiples Issues
Slug
wps-hide-login
Published
2020-01-27
Title
WPS Hide Login < 1.5.5 - Secret Login Page Disclosure
Slug
wps-hide-login
Published
2021-10-27
Title
WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header
Slug
wps-hide-login
Published
2024-01-10
Title
WPS Hide Login < 1.9.12 - Hidden Login Page Location Disclosure
Slug
wps-hide-login
Published
2024-06-10
Title
WPS Hide Login < 1.9.16 - Login Page Disclosure
Slug
wps-hide-login
Published
2024-06-24
Title
WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure
Slug
wps-limit-login
Published
2019-07-23
Title
WPS Limit Login <= 1.4.5 - Multiple Issues
Slug
wps-team
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wps-team
Published
2025-04-15
Title
Team Members < 3.4.5 - Contributor+ PHP Object Injection