WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-404-auto-redirect-to-similar-post
Published
2023-08-11
Title
WP 404 Auto Redirect to Similar Post < 1.0.4 - Admin+ Stored XSS
Slug
wp-404-auto-redirect-to-similar-post
Published
2024-02-05
Title
WP 404 Auto Redirect to Similar Post < 1.0.4 - Reflected Cross-Site Scripting via request
Slug
wp-404-auto-redirect-to-similar-post
Published
2024-04-16
Title
WP 404 Auto Redirect to Similar Post < 1.0.5 - Reflected Cross-Site Scripting via Debug Mode URI
Slug
wp-404-auto-redirect-to-similar-post
Published
2026-02-17
Title
WP 404 Auto Redirect < 1.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-able-player
Published
2025-01-07
Title
Able Player <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-about-author
Published
2025-02-24
Title
WP About Author < 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-abstracts-manuscripts-manager
Published
2023-05-08
Title
WP Abstracts < 2.6.4 - Reflected XSS
Slug
wp-abstracts-manuscripts-manager
Published
2023-06-27
Title
WP Abstracts < 2.6.3 - Cross-Site Request Forgery
Slug
wp-abstracts-manuscripts-manager
Published
2023-08-30
Title
WP Abstracts < 2.6.4 - Admin+ Stored XSS
Slug
wp-abstracts-manuscripts-manager
Published
2024-09-23
Title
WP Abstracts < 2.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-abstracts-manuscripts-manager
Published
2024-10-24
Title
WP Abstracts < 2.7.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-abstracts-manuscripts-manager
Published
2025-01-17
Title
WP Abstracts < 2.7.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
wp-abstracts-manuscripts-manager
Published
2025-02-11
Title
WP Abstracts < 2.7.4 - Cross-Site Request Forgery to Arbitrary Account Deletion
Slug
wp-abstracts-manuscripts-manager
Published
2025-04-09
Title
WP Abstracts <= 2.7.5 - Stored XSS via CSRF
Slug
wp-abstracts-manuscripts-manager
Published
2025-09-03
Title
Abstracts < 2.7.5 - Unauthenticated Local File Inclusion
Slug
wp-academic-people
Published
2021-09-08
Title
WP Academic People List <= 0.4.1 - Reflected Cross-Site Scripting
Slug
wp-access-areas
Published
2025-04-01
Title
Access Areas < 1.5.20 - Reflected Cross-Site Scripting
Slug
wp-accessibility
Published
2019-12-26
Title
WP Accessibility < 1.7.0 - Minor Authenticated Stored XSS in custom CSS
Slug
wp-accessibility
Published
2026-02-26
Title
WP Accessibility < 2.3.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'alt' Attribute
Slug
wp-accessibility-helper
Published
2022-01-26
Title
WP Accessibility Helper (WAH) < 0.6.0.7 - Reflected Cross-Site Scripting (XSS)
Slug
wp-accessibility-helper
Published
2023-09-05
Title
WP Accessibility Helper (WAH) < 0.6.2.5 - Missing Authorization via AJAX action
Slug
wp-accessibility-helper
Published
2024-04-10
Title
WP Accessibility Helper (WAH) < 0.6.2.6 - Missing Authorization
Slug
wp-accessibility-helper
Published
2024-07-09
Title
WP Accessibility Helper (WAH) < 0.6.3 - Missing Authorization
Slug
wp-accessibility-helper
Published
2024-08-28
Title
WP Accessibility Helper < 0.6.2.9 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
Slug
wp-action-network
Published
2024-02-14
Title
Action Network < 1.4.3 - Reflected Cross-Site Scripting via 'search'