WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-affiliate-links
Published
2023-06-15
Title
WP Affiliate Links <= 0.1.1 - Reflected XSS
Slug
wp-affiliate-platform
Published
2014-08-01
Title
WP Affiliate Manager < 1.1 - Reflected Cross-Site Scripting
Slug
wp-affiliate-platform
Published
2022-11-14
Title
WP Affiliate Platform < 6.4.0 - Reflected Cross-Site Scripting
Slug
wp-affiliate-platform
Published
2022-11-14
Title
WP Affiliate Platform < 6.4.0 - Admin+ Stored XSS
Slug
wp-affiliate-platform
Published
2022-11-14
Title
WP Affiliate Platform < 6.4.0 - Affiliate Record Deletion via CSRF
Slug
wp-affiliate-platform
Published
2024-06-22
Title
WP Affiliate Platform < 6.5.1 - POST Reflected XSS
Slug
wp-affiliate-platform
Published
2024-06-22
Title
WP Affiliate Platform < 6.5.1 - Reflected XSS via Banner Editing
Slug
wp-affiliate-platform
Published
2024-06-22
Title
WP Affiliate Platform < 6.5.1 - Reflected XSS via Affiliate Editing
Slug
wp-affiliate-platform
Published
2024-06-22
Title
WP Affiliate Platform < 6.5.1 - Reflected XSS via Registration Form
Slug
wp-affiliate-platform
Published
2024-06-22
Title
WP Affiliate Platform < 6.5.1 - Reflected XSS via Lead Editing
Slug
wp-affiliate-platform
Published
2024-06-22
Title
WP Affiliate Platform < 6.5.1 - Stored XSS via CSRF
Slug
wp-affiliate-platform
Published
2024-06-22
Title
WP Affiliate Platform < 6.5.1 - Profile Update via CSRF
Slug
wp-affiliate-platform
Published
2024-07-08
Title
WP Affiliate Platform < 6.5.2 - Affiliate Deletion via CSRF
Slug
wp-agenda
Published
2024-11-08
Title
WP Agenda <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-airbnb-review-slider
Published
2023-01-23
Title
WP Airbnb Review Slider < 3.3 - Subscriber+ SQLi
Slug
wp-airbnb-review-slider
Published
2023-01-20
Title
WP Airbnb Review Slider < 3.3 - CSRF
Slug
wp-airbnb-review-slider
Published
2025-02-14
Title
WP Airbnb Review Slider < 4.0 - Authenticated (Administrator+) SQL Injection
Slug
wp-airbnb-review-slider
Published
2025-11-06
Title
WP Airbnb Review Slider < 4.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-ajax-contact-form
Published
2024-07-09
Title
WP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting
Slug
wp-ajax-contact-form
Published
2024-07-09
Title
WP Ajax Contact Form <= 2.2.2 - Arbitrary Email Deletion via CSRF
Slug
wp-all-export
Published
2021-10-06
Title
WP All Export < 1.3.1 - Admin+ Stored Cross-Site Scripting
Slug
wp-all-export
Published
2022-05-20
Title
Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection
Slug
wp-all-export
Published
2022-06-14
Title
WP All Export < 1.3.6 - Reflected Cross-Site Scripting
Slug
wp-all-export
Published
2023-11-21
Title
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF
Slug
wp-all-export
Published
2023-11-21
Title
WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE