WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-analytify
Published
2024-04-26
Title
Analytify < 5.2.4 - Missing Authorization to Unauthenticated Google Analytics Tracking ID Modification
Slug
wp-analytify
Published
2024-04-29
Title
Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) < 5.2.4 - Missing Authorization
Slug
wp-analytify
Published
2024-06-06
Title
Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) < 5.2.4 - Cross-Site Request Forgery
Slug
wp-analytify
Published
2024-08-12
Title
Analytify < 5.4.0 - Cross-Site Request Forgery to Opt-out
Slug
wp-analytify
Published
2024-12-02
Title
Analytify < 5.5.0 - Missing Authorization
Slug
wp-analytify
Published
2025-02-14
Title
Analytify < 5.5.1 - Missing Authorization
Slug
wp-analytify
Published
2025-03-27
Title
Analytify < 6.0.0 - Missing Authorization to Authenticated (Subscriber+) Minor Settings Update
Slug
wp-analytify-pro
Published
2025-10-30
Title
Analytify Pro < 7.0.4 - Unauthenticated Information Exposure
Slug
wp-announcements
Published
2025-01-16
Title
WP-Announcements <= 1.8 - Reflected Cross-Site Scripting
Slug
wp-anything-slider
Published
2023-10-30
Title
Wp anything slider < 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
wp-aparat
Published
2024-03-25
Title
Aparat for WordPress < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-app-bar
Published
2025-12-29
Title
App Bar <= 1.5 - Reflected Cross-Site Scripting
Slug
wp-app-bar
Published
2026-03-06
Title
WP App Bar <= 1.5 - Unauthenticated Stored Cross-Site Scripting via 'app-bar-features' Parameter
Slug
wp-app-maker
Published
2014-08-01
Title
WP App Maker 1.0.16.4 - icons-launcher.php uid Parameter Reflected XSS
Slug
wp-appbox
Published
2022-01-17
Title
WP-Appbox < 4.3.18 - Authenticated Local File Inclusion
Slug
wp-appbox
Published
2022-04-05
Title
WP-Appbox < 4.4.0 - Admin+ Stored Cross-Site Scripting
Slug
wp-appbox
Published
2024-12-23
Title
WP-Appbox < 4.5.4 - Reflected Cross-Site Scripting
Slug
wp-appbox
Published
2025-02-20
Title
WP-Appbox < 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via appbox Shortcode
Slug
wp-applink
Published
2025-07-23
Title
WP Applink <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
Slug
wp-appointment-schedule-booking-system
Published
2016-10-03
Title
WordPress Appointment Schedule Booking System - Authenticated Stored XSS
Slug
wp-armour-extended
Published
2024-08-26
Title
WP Armour Extended < 1.32 - Reflected Cross-Site Scripting
Slug
wp-armour-extended
Published
2024-08-26
Title
WP Armour Extended < 1.32 - Cross-Site Request Forgery
Slug
wp-asambleas
Published
2025-02-17
Title
WP-Asambleas <= 2.85.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-asambleas
Published
2025-02-24
Title
WP-Asambleas <= 2.85.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
wp-asambleas
Published
2025-01-13
Title
WP-Asambleas <= 2.85.0 - Reflected Cross-Site Scripting