WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wordpress-popup
Published
2024-07-29
Title
Hustle < 7.8.5 - Admin+ Stored XSS
Slug
wordpress-popup
Published
2024-11-25
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.6 - Missing Authorization to Unpublished Form Exposure
Slug
wordpress-popup
Published
2024-11-26
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.6 - Missing Authorization to Unauthorized Form Submission
Slug
wordpress-popup
Published
2026-01-23
Title
Hustle < 7.8.9.3 - Subscriber+ Arbitrary File Upload via Module Import
Slug
wordpress-popup
Published
2026-01-25
Title
Hustle < 7.8.9.3 - Unauthenticated Information Exposure
Slug
wordpress-popup
Published
2026-04-07
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.11 - Missing Authorization to Unauthenticated Conversion Tracking Data Manipulation
Slug
wordpress-popup
Published
2026-05-12
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.10.2 - Missing Authorization
Slug
wordpress-seo
Published
2014-08-01
Title
Yoast SEO - Security issue which allowed any user to reset settings
Slug
wordpress-seo
Published
2014-08-01
Title
Yoast SEO < 1.4.7 - Reset Settings Feature Access Restriction Bypass
Slug
wordpress-seo
Published
2015-03-11
Title
Yoast SEO < 1.7.4 - Blind SQL Injection
Slug
wordpress-seo
Published
2015-06-12
Title
Yoast SEO < 2.2 - Authenticated Stored DOM XSS
Slug
wordpress-seo
Published
2016-05-06
Title
Yoast SEO <= 3.2.4 - Subscriber Settings Sensitive Data Exposure
Slug
wordpress-seo
Published
2016-06-14
Title
Yoast SEO < 3.3.0 - Unspecified Cross-Site Scripting (XSS)
Slug
wordpress-seo
Published
2016-08-02
Title
Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wordpress-seo
Published
2017-11-15
Title
Yoast SEO < 5.8 - Authenticated Cross-Site Scripting (XSS)
Slug
wordpress-seo
Published
2018-11-20
Title
Yoast SEO <= 9.1 - Authenticated Race Condition
Slug
wordpress-seo
Published
2019-07-09
Title
Yoast SEO 1.2.0-11.5 - Admin+ Stored XSS
Slug
wordpress-seo
Published
2021-10-05
Title
Yoast SEO 16.7-17.2 - Unauthenticated Full Path Disclosure
Slug
wordpress-seo
Published
2023-11-24
Title
Yoast SEO < 21.1 - Authenticated (Seo Manager+) Stored Cross-Site Scripting
Slug
wordpress-seo
Published
2024-05-06
Title
Yoast SEO < 22.6 - Reflected Cross-Site Scripting
Slug
wordpress-seo
Published
2024-05-14
Title
Yoast SEO < 22.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wordpress-seo
Published
2026-02-05
Title
Yoast SEO < 26.9 - Contributor+ Stored XSS
Slug
wordpress-seo
Published
2026-03-21
Title
Yoast SEO < 27.2 - Contributor+ Stored XSS via 'jsonText' Block Attribute
Slug
wordpress-seo
Published
2026-05-26
Title
Yoast SEO < 26.6 - Contributor+ IDOR to Sensitive Information Exposure via post_id Parameter
Slug
wordpress-seo-premium
Published
2015-04-20
Title
WordPress SEO by Yoast < 2.1 - Cross-Site Scripting (XSS)