WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wordpress-activity-o-meter
Published
2025-02-04
Title
WordPress Activity O Meter <= 1 - Reflected XSS
Slug
wordpress-admanager
Published
2014-11-26
Title
Ad Manager <= 1.1.2 - Open Redirection
Slug
wordpress-admin-bar-improved
Published
2025-03-24
Title
WordPress Admin Bar Improved <= 3.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wordpress-backup-to-dropbox
Published
2014-12-22
Title
WordPress Backup to Dropbox 4.0 - Reflected XSS
Slug
wordpress-checkout
Published
2014-08-01
Title
Checkout Plugin - File Upload Remote Code Execution
Slug
wordpress-connect
Published
2014-08-01
Title
WordPress Connect <= 2.0.3 - Editor Pages Unspecified XSS
Slug
wordpress-countdown-widget
Published
2022-11-14
Title
WordPress Countdown Widget < 3.1.9.3 - Admin+ Stored XSS
Slug
wordpress-country-selector
Published
2022-04-20
Title
Country Selector < 1.6.6 - Reflected Cross-Site Scripting
Slug
wordpress-custom-sidebar
Published
2025-01-16
Title
WordPress Custom Sidebar <= 2.3 - Authenticated (Contributor+) SQL Injection
Slug
wordpress-dashboard-twitter
Published
2025-01-16
Title
WordPress Dashboard Tweeter <= 1.3.2 - Missing Authorization
Slug
wordpress-data-guards
Published
2025-01-16
Title
WordPress Data Guard <= 8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wordpress-database-reset
Published
2020-01-16
Title
WP Database Reset < 3.15 - Unauthenticated Database Reset
Slug
wordpress-database-reset
Published
2020-01-16
Title
WP Database Reset < 3.15 - Privilege Escalation
Slug
wordpress-database-reset
Published
2024-02-20
Title
Database Reset < 3.23 - Cross-Site Request Forgery to WP Reset Plugin Installation
Slug
wordpress-donation-plugin-with-goals-and-paypal-ipn-by-nonprofitcmsorg
Published
2014-08-01
Title
Donation <= 1.0 - SQL Injection
Slug
wordpress-easy-allopass
Published
2025-06-05
Title
Wp Easy Allopass <= 4.1.1 - Cross-Site Request Forgery
Slug
wordpress-easy-paypal-payment-or-donation-accept-plugin
Published
2023-01-17
Title
Easy Accept Payments for PayPal < 4.9.10 - Contributor+ Stored XSS
Slug
wordpress-easy-paypal-payment-or-donation-accept-plugin
Published
2024-04-25
Title
Easy Accept Payments < 5.0 - Missing Authorization
Slug
wordpress-ecommerce
Published
2017-10-01
Title
MarketPress <= 3.2.6 - PHP Object Injection
Slug
wordpress-feed-statistics
Published
2014-08-07
Title
Feed Statistics < 4.0 - Open Redirect
Slug
wordpress-feed-statistics
Published
2023-10-16
Title
Feed Statistics <= 4.1 - Arbitrary Settings Update via CSRF
Slug
wordpress-file-monitor
Published
2016-06-22
Title
WordPress File Monitor - Stored Cross-Site Scripting (XSS)
Slug
wordpress-file-upload-pro
Published
2022-02-14
Title
WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
wordpress-file-upload-pro
Published
2022-02-14
Title
WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVG
Slug
wordpress-file-upload-pro
Published
2022-03-01
Title
WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE