WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wordpress-gdpr
Published
2024-11-17
Title
WordPress GDPR < 2.0.3 - Unauthenticated Stored Cross-Site Scripting
Slug
wordpress-importer
Published
2025-03-25
Title
WordPress Importer < 0.8.4 - Admin+ PHP Object Injection
Slug
wordpress-logging-service
Published
2025-01-16
Title
WordPress Logging Service <= 1.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wordpress-member-private-conversation
Published
2012-06-05
Title
Member Private Conversation < 1.4 - Unrestricted File Upload
Slug
wordpress-meta-robots
Published
2015-11-24
Title
WordPress Meta Robots <= 2.1 - Authenticated Blind SQL Injection
Slug
wordpress-mobile-pack
Published
2014-09-17
Title
WordPress Mobile Pack 1.0.8223 - 2.0.1 Password Protected Post Disclosure
Slug
wordpress-mobile-pack
Published
2015-07-18
Title
WordPress Mobile Pack <= 2.1.2 - Information Disclosure
Slug
wordpress-mobile-pack
Published
2023-07-07
Title
WordPress Mobile Pack <= 3.4.1 - Cross-Site Request Forgery
Slug
wordpress-mu-secure-invites
Published
2025-03-21
Title
Secure Invites <= 1.3 - Reflected Cross-Site Scripting
Slug
wordpress-multisite-user-sync
Published
2022-02-07
Title
Multisite User Sync/Unsync < 2.1.2 - Reflected Cross-Site Scripting
Slug
wordpress-nextgen-galleryview
Published
2023-06-15
Title
NextGen GalleryView <= 0.5.5 - Reflected XSS
Slug
wordpress-nextgen-galleryview
Published
2023-05-30
Title
NextGen GalleryView <= 0.5.5 - Cross-Site Request Forgery
Slug
wordpress-notification-bar
Published
2024-07-06
Title
WordPress Notification Bar <= 1.3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wordpress-paypal-donation
Published
2026-03-20
Title
WordPress PayPal Donation <= 1.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'amount' Shortcode Attribute
Slug
wordpress-ping-optimizer
Published
2022-08-23
Title
WordPress Ping Optimizer < 2.35.1.3.0 - Arbitrary Settings Update via CSRF
Slug
wordpress-ping-optimizer
Published
2024-03-20
Title
WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF
Slug
wordpress-plugin-for-simple-google-adsense-insertion
Published
2022-05-12
Title
WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF
Slug
wordpress-popular-posts
Published
2021-06-07
Title
WordPress Popular Posts < 5.3.3 - Authenticated Code Injection
Slug
wordpress-popular-posts
Published
2021-06-07
Title
WordPress Popular Posts < 5.3.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wordpress-popular-posts
Published
2021-07-03
Title
WordPress Popular Posts < 5.3.4 - Admin+ Stored Cross-Site Scripting
Slug
wordpress-popular-posts
Published
2022-06-29
Title
WordPress Popular Posts < 6.0.0 - Reflected Cross-Site Scripting
Slug
wordpress-popular-posts
Published
2022-11-18
Title
WordPress Popular Posts < 6.1.0 - Unauthenticated Views Manipulation
Slug
wordpress-popular-posts
Published
2023-10-18
Title
WordPress Popular Posts < 6.3.3 - Contributor+ Stored XSS
Slug
wordpress-popular-posts
Published
2025-01-03
Title
WordPress Popular Posts < 7.2.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
wordpress-popup
Published
2019-05-24
Title
Hustle < 6.0.8.1 - Unauthenticated CSV Injection