WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
3d-flipbook-dflip-lite
Published
2025-01-07
Title
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer < 2.3.53 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
3d-flipbook-dflip-lite
Published
2025-06-30
Title
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer < 2.3.67 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source'
Slug
3d-flipbook-dflip-lite
Published
2026-03-10
Title
Dear Flipbook < 2.4.27 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels
Slug
3d-flipbook-dflip-lite
Published
2026-05-27
Title
DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer < 2.4.30 - Missing Authorization
Slug
3d-flipbook-dflip-lite
Published
2026-09-04
Title
Dear Flipbook < 2.4.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.dvcss' Element Class Attribute
Slug
3d-flipbook-dflip-lite
Published
2026-09-04
Title
Dear Flipbook < 2.4.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.df-element' Element Inner HTML
Slug
3d-image-gallery
Published
2025-08-26
Title
Image Gallery block – Create and display photo gallery/photo album. < 2.0.0 - Missing Authorization
Slug
3d-photo-gallery
Published
2025-02-20
Title
3D Photo Gallery <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
3d-presentation
Published
2024-10-31
Title
3D Presentation <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
3d-viewer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
3d-viewer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
3d-viewer
Published
2026-03-01
Title
3D viewer – Embed 3D Models < 1.8.6 - Missing Authorization
Slug
3dady-real-time-web-stats
Published
2022-09-23
Title
3dady Real Time Web Stats <= 1.0 - Stored Cross-Site Scripting via CSRF
Slug
3dprint
Published
2022-11-08
Title
3DPrint < 3.5.6.9 - Arbitrary File and Directory Deletion via CSRF
Slug
3dprint
Published
2022-09-08
Title
3DPrint < 3.5.6.9 - CSRF to arbitrary file downlad
Slug
3dprint-lite
Published
2021-09-23
Title
3DPrint Lite < 1.9.1.5 - Unauthenticated Arbitrary File Upload
Slug
3dprint-lite
Published
2021-10-11
Title
3D Print Lite < 1.9.1.6 - Reflected Cross-Site Scripting
Slug
3dprint-lite
Published
2024-11-15
Title
3DPrint Lite < 2.1 - Settings Update via CSRF
Slug
3dprint-lite
Published
2025-03-27
Title
3DPrint Lite < 2.1.3.6 - Cross-Site Request Forgery
Slug
3dprint-lite
Published
2025-04-07
Title
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'infill_text'
Slug
3dprint-lite
Published
2025-04-07
Title
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'material_text'
Slug
3dprint-lite
Published
2025-04-07
Title
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text'
Slug
3dprint-lite
Published
2025-04-07
Title
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'coating_text'
Slug
3dvieweronline-wp
Published
2025-01-08
Title
3DVieweronline < 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
3xsocializer
Published
2022-04-25
Title
3xSocializer <= 0.98.22 - Subscriber+ SQLi