WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
2j-slideshow
Published
2022-05-04
Title
Slideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting
Slug
2j-slideshow
Published
2023-10-02
Title
Images Slideshow by 2J <= 1.3.54 - Contributor+ Stored XSS
Slug
2j-slideshow
Published
2024-08-16
Title
Slideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting via 'post'
Slug
2kb-amazon-affiliates-store
Published
2017-09-20
Title
2kb Amazon Affiliates Store <= 2.1.0 - Authenticated Cross-Site Scripting (XSS)
Slug
2kb-amazon-affiliates-store
Published
2022-10-24
Title
2kb Amazon Affiliates Store <= 2.1.5 - Reflected XSS
Slug
2mb-autocode
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
3-word-address-validation-field
Published
2023-07-18
Title
what3words Address Field < 4.0.0 - Admin+ Sensitive Information Disclosure
Slug
3-word-address-validation-field
Published
2025-02-14
Title
what3words Address Field < 4.0.16 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
360-product-rotation
Published
2019-06-27
Title
360 Product Rotation <= 1.4.7 - Reflected XSS
Slug
360-product-rotation
Published
2024-12-26
Title
360 Product Rotation <= 1.5.8 - Reflected XSS
Slug
360-sphere-images
Published
2025-08-01
Title
360 Photo Spheres <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
360-view
Published
2025-04-24
Title
360 View <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
360crest-themeone-tinymce-shortcodes
Published
2026-06-08
Title
TinyMCE shortcode Addon <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'btnrel' Shortcode Attribute
Slug
360deg-javascript-viewer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
360deg-javascript-viewer
Published
2023-11-28
Title
360 Javascript Viewer < 1.7.12 - Unauthenticated Settings Update
Slug
360deg-javascript-viewer
Published
2024-03-21
Title
360 Javascript Viewer < 1.7.13 - Missing Authorization to Plugin Settings Update
Slug
360deg-javascript-viewer
Published
2024-12-11
Title
360 Javascript Viewer < 1.7.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
3bubble-amazon-s3-html-5-video-with-adverts
Published
2015-07-07
Title
S3Bubble Cloud Video With Adverts & Analytics <= 0.7 - Arbitrary File Download
Slug
3com-asesor-de-cookies
Published
2022-10-12
Title
3com Asesor de Cookies <= 3.4.3 - Admin+ Stored XSS
Slug
3d-avatar-user-profile
Published
2024-12-12
Title
3D Avatar User Profile <= 1.0.0 - Reflected Cross-Site Scripting
Slug
3d-cover-carousel
Published
2021-09-08
Title
3D Cover Carousel <= 1.0 - Reflected Cross-Site Scripting
Slug
3d-flipbook-dflip-lite
Published
2021-09-15
Title
Dflip Lite < 1.7.10 - Contributor+ Stored Cross-Site Scripting
Slug
3d-flipbook-dflip-lite
Published
2024-02-02
Title
DearFlip < 2.2.27 - Contributor+ Stored XSS
Slug
3d-flipbook-dflip-lite
Published
2024-03-25
Title
DearFlip < 2.2.27 - Contributor+ Stored XSS
Slug
3d-flipbook-dflip-lite
Published
2024-10-23
Title
PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip < 2.3.42 - Reflected Cross-Site Scripting