WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-auto-affiliate-links
Published
2026-05-07
Title
Auto Affiliate Links < 6.8.8.1 - Unauthenticated Stored Cross-Site Scripting via 'url' Parameter
Slug
wp-auto-affiliate-links
Published
2026-05-25
Title
Auto Affiliate Links < 6.8.9 - Missing Authorization
Slug
wp-auto-republish
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-auto-republish
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-auto-republish
Published
2024-03-19
Title
RevivePress < 1.5.6.1 - Subscriber+ Settings Update/Access
Slug
wp-auto-republish
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
wp-auto-spinner
Published
2025-05-16
Title
Wordpress Auto Spinner < 3.26.0 - Missing Authorization
Slug
wp-auto-spinner
Published
2025-07-07
Title
Wordpress Auto Spinner <= 3.25.0 - Reflected Cross-Site Scripting
Slug
wp-auto-top
Published
2024-11-22
Title
wp auto top <= 2.9.3 - Cross-Site Request Forgery
Slug
wp-autobuzz
Published
2026-05-26
Title
WP AutoBuzz <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'googleAccount' Parameter
Slug
wp-autokeyword
Published
2025-03-31
Title
WP AutoKeyword <= 1.0 - Unauthenticated SQL Injection
Slug
wp-autokeyword
Published
2025-04-01
Title
WP AutoKeyword <= 1.0 - Missing Authorization to Arbitrary Content Deletion
Slug
wp-autokeyword
Published
2025-04-10
Title
WP AutoKeyword <= 1.0 - Reflected Cross-Site Scripting
Slug
wp-autokeyword
Published
2025-06-05
Title
WP AutoKeyword <= 1.0 - Missing Authorization
Slug
wp-automatic
Published
2014-08-01
Title
Automatic 2.0.3 - csv.php q Parameter SQL Injection
Slug
wp-automatic
Published
2021-09-06
Title
WordPress Automatic < 3.53.3 - Unauthenticated Arbitrary Options Update
Slug
wp-automatic
Published
2024-03-13
Title
Automatic < 3.92.1 - Cross-Site Request Forgery to Privilege Escalation
Slug
wp-automatic
Published
2024-03-13
Title
Automatic < 3.92.1 - Unauthenticated Arbitrary File Download and Server-Side Request Forgery
Slug
wp-automatic
Published
2024-03-13
Title
Automatic < 3.92.1 - Unauthenticated SQL Injection
Slug
wp-automatic
Published
2024-04-19
Title
WordPress Automatic Plugin < 3.93.0 Cross-Site Request Forgery
Slug
wp-automatic
Published
2024-05-17
Title
WordPress Automatic < 3.95.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay Parameter
Slug
wp-automatic
Published
2025-06-10
Title
WordPress Automatic Plugin - AI content generator and auto poster plugin < 3.116.0 - Authenticated (Author+) Arbitrary File Upload
Slug
wp-automatic
Published
2025-08-25
Title
WordPress Automatic Plugin - AI content generator and auto poster plugin < 3.119.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-automatic
Published
2026-06-25
Title
WordPress Automatic Plugin < 3.135.1 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-automatic-widget
Published
2024-11-08
Title
wp_automatic_widget <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting