WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wa-chatbox-manager
Published
2025-03-27
Title
Chatbox Manager < 1.2.3 - Missing Authorization
Slug
wa-chatbox-manager
Published
2025-07-16
Title
Chatbox Manager < 1.2.6 - Missing Authorization
Slug
wa-chatbox-manager
Published
2025-08-27
Title
Chatbox Manager < 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wa-form-builder
Published
2016-12-05
Title
WA Form Builder 1.1 - Unauthenticated SQL Injection
Slug
wa-sticky-button
Published
2022-08-01
Title
WP Sticky Button < 1.4.1 - Unauthenticated Arbitrary Settings Update to Stored XSS
Slug
wa11y
Published
2025-03-24
Title
wA11y – The Web Accessibility Toolbox <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wadi-addons-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wadi-survey
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wadi-survey
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wah-forms
Published
2025-01-16
Title
WAH Forms <= 1.0 - Missing Authorization
Slug
waiting
Published
2023-03-22
Title
Waiting: One-click Countdowns <= 0.6.2 - Subscriber+ SQLi
Slug
waiting
Published
2023-05-17
Title
Waiting: One-click countdowns <= 0.6.2 - Subscriber+ Stored XSS
Slug
waiting
Published
2022-12-23
Title
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization
Slug
waiting
Published
2022-12-23
Title
Waiting: One-click countdowns <= 0.6.2 - Cross-Site Request Forgery
Slug
waiting
Published
2022-12-23
Title
Waiting: One-click countdowns <= 0.6.2 - Admin+ Cross-Site Scripting
Slug
waitlist-woocommerce
Published
2022-01-13
Title
XootiX Plugins - Various Versions CSRF to Arbitrary Options Update
Slug
waitlist-woocommerce
Published
2023-07-03
Title
Waitlist Woocommerce < 2.5.3 - Settings Reset via CSRF
Slug
waitlist-woocommerce
Published
2024-08-07
Title
Waitlist Woocommerce ( Back in stock notifier ) < 2.6.1 - Missing Authorization
Slug
waitlist-woocommerce
Published
2024-09-13
Title
Waitlist Woocommerce ( Back in stock notifier ) < 2.7.6 - Reflected Cross-Site Scripting
Slug
walk-score
Published
2014-06-12
Title
Walk Score <= 0.5.5 - Multiple XSS
Slug
walker-core
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
walker-core
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
walker-core
Published
2025-11-19
Title
Walker Core < 1.3.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
walker-elementor
Published
2025-12-31
Title
Walker for Elementor <= 1.1.6 - Missing Authorization
Slug
wallet-system-for-woocommerce
Published
2024-04-12
Title
Wallet System for WooCommerce < 2.5.10 - Cross-Site Request Forgery