WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-airbnb-review-slider
Published
2023-01-23
Title
WP Airbnb Review Slider < 3.3 - Subscriber+ SQLi
Slug
wp-airbnb-review-slider
Published
2023-01-20
Title
WP Airbnb Review Slider < 3.3 - CSRF
Slug
wp-airbnb-review-slider
Published
2025-02-14
Title
WP Airbnb Review Slider < 4.0 - Authenticated (Administrator+) SQL Injection
Slug
wp-airbnb-review-slider
Published
2025-11-06
Title
WP Airbnb Review Slider < 4.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-ajax-contact-form
Published
2024-07-09
Title
WP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting
Slug
wp-ajax-contact-form
Published
2024-07-09
Title
WP Ajax Contact Form <= 2.2.2 - Arbitrary Email Deletion via CSRF
Slug
wp-ajaxify-comments
Published
2026-02-27
Title
Ajaxify Comments < 3.2 - Unauthenticated HTTP Header Injection
Slug
wp-all-export
Published
2021-10-06
Title
WP All Export < 1.3.1 - Admin+ Stored Cross-Site Scripting
Slug
wp-all-export
Published
2022-05-20
Title
Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection
Slug
wp-all-export
Published
2022-06-14
Title
WP All Export < 1.3.6 - Reflected Cross-Site Scripting
Slug
wp-all-export
Published
2023-11-21
Title
WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE
Slug
wp-all-export
Published
2023-11-21
Title
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF
Slug
wp-all-export
Published
2023-11-21
Title
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF
Slug
wp-all-export
Published
2026-02-17
Title
WP All Export < 1.4.15 - Unauthenticated Sensitive Information Exposure via PHP Type Juggling
Slug
wp-all-export-pro
Published
2022-10-03
Title
WP ALL Export Pro < 1.7.9 - Authenticated Code Injection
Slug
wp-all-export-pro
Published
2022-10-03
Title
WP ALL Export Pro < 1.7.9 - Authenticated SQLi
Slug
wp-all-export-pro
Published
2023-11-21
Title
WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE
Slug
wp-all-export-pro
Published
2023-11-21
Title
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF
Slug
wp-all-export-pro
Published
2023-11-21
Title
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF
Slug
wp-all-export-pro
Published
2025-02-07
Title
WP All Export Pro < 1.9.2 - Unauthenticated Remote Code Execution via Custom Export Fields
Slug
wp-all-export-pro
Published
2025-02-07
Title
WP All Export Pro < 1.9.2 - Authenticated (ShopManager+) Arbtirary Options Update
Slug
wp-all-import
Published
2015-02-26
Title
Import any XML or CSV File to WordPress <= 3.2.3 - RCE
Slug
wp-all-import
Published
2015-03-17
Title
Import any XML or CSV File to WordPress <= 3.2.4 - Multiple Vulnerabilities
Slug
wp-all-import
Published
2017-10-08
Title
Import any XML or CSV File to WordPress <= 3.4.5 - Cross-Site Scripting (XSS)
Slug
wp-all-import
Published
2018-03-08
Title
Import any XML or CSV File to WordPress <= 3.4.5 - Cross-Site Scripting (XSS)