WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
worry-proof-backup
Published
2026-02-25
Title
Worry Proof Backup <= 0.2.4 - Authenticated (Subscriber+) Path Traversal via Backup Upload
Slug
wot-elementor-widgets
Published
2024-12-05
Title
Wot Elementor Widgets <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wovax-idx
Published
2024-12-14
Title
Wovax IDX <= 1.2.2 - Missing Authorization to Privilege Escalation
Slug
wow-carousel-for-divi-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wow-carousel-for-divi-lite
Published
2025-01-24
Title
Divi Carousel Lite < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Logo Carousel Widgets
Slug
wow-entrance-effects-wee
Published
2025-02-27
Title
WOW Entrance Effects (WEE!) <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wow-media-library-fix
Published
2025-12-12
Title
Fix Media Library <= 2.0 - Unauthenticated Information Exposure
Slug
wow-moodboard-lite
Published
2015-05-29
Title
Wow Moodboard Lite <= 1.1.1.1 - Open Redirect
Slug
wowhead-tooltips
Published
2025-04-24
Title
WoWHead Tooltips <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wowpress
Published
2026-04-07
Title
WowPress <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
wowpth
Published
2025-02-20
Title
WoWPth <= 2.0 - Reflected XSS
Slug
wowpth
Published
2025-02-20
Title
WoWPth <= 2.0 - Reflected XSS
Slug
wowrestro
Published
2021-07-12
Title
WOWRestro < 1.1 - CSRF Bypass
Slug
wp-1-slider
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-2fa
Published
2022-04-14
Title
WP 2FA < 2.2.0 - Arbitrary 2FA Disabling via IDOR
Slug
wp-2fa
Published
2022-05-06
Title
WP 2FA < 2.2.1 - Reflected Cross-Site Scripting
Slug
wp-2fa
Published
2022-09-14
Title
WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
Slug
wp-2fa
Published
2024-01-02
Title
WP 2FA < 2.6.0 - Subscriber+ Arbitrary Email Sending
Slug
wp-2fa
Published
2024-01-02
Title
WP 2FA < 2.6.0 - Arbitrary Email Sending via CSRF
Slug
wp-2fa
Published
2024-04-16
Title
WP 2FA – Two-factor authentication for WordPress < 2.6.3 - Reflected Cross-Site Scripting
Slug
wp-2fa
Published
2024-06-20
Title
WP 2FA < 2.6.4 - Unauthenticated Information Exposure via Log File
Slug
wp-2fa
Published
2025-11-03
Title
WP 2FA < 3.0.0 - Second Factor Bypass
Slug
wp-3dbanner-rotator
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-3dflick-slideshow
Published
2014-08-01
Title
wp-3dflick-slideshow - Arbitrary File Upload
Slug
wp-3dflick-slideshow
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)