WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
WHMpress_Client_Area_Api
Published
2025-02-27
Title
WHMPress - WHMCS Client Area <= 4.3-revision-3- Authenticated (Subscriber+) Arbitrary Options Update
Slug
WP-Mobile-BankID-Integration
Published
2023-12-26
Title
WP-Mobile-BankID-Integration < 1.0.1 - PHP Object Injection
Slug
WP_AttractiveDonationsSystem
Published
2025-10-02
Title
Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Cross-Site Request Forgery
Slug
WP_AttractiveDonationsSystem
Published
2026-01-08
Title
Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Slug
WP_AttractiveDonationsSystem
Published
2026-02-26
Title
WP Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Unauthenticated SQL Injection
Slug
WP_Estimation_Form
Published
2019-02-14
Title
WP Cost Estimation < 9.644 - Arbitrary File Upload and Delete
Slug
WP_Estimation_Form
Published
2019-02-14
Title
WP Cost Estimation < 9.660 - Upload Directory Traversal
Slug
WP_UltimateToursBuilder
Published
2025-05-16
Title
WP Ultimate Tours Builder <= 1.055 - Cross-Site Request Forgery
Slug
WhatsCart-for-WooCommerce
Published
2025-05-22
Title
WhatsCart - Whatsapp Abandoned Cart Recovery, Order Notifications, Chat Box, OTP for WooCommerce <= 1.1.0 - Unauthenticated SQL Injection
Slug
Woo-product-multiaction
Published
2025-07-01
Title
WooCommerce Product Multi-Action <= 1.3 - Unauthenticated PHP Object Injection
Slug
WooCommerce-Multi-Locations-Inventory-Management
Published
2025-01-31
Title
MultiLoca - WooCommerce Multi Locations Inventory Management < 4.1.12 - Authenticated (Subscriber+) SQL Injection
Slug
WooCommerce-Multi-Locations-Inventory-Management
Published
2025-09-23
Title
MultiLoca - WooCommerce Multi Locations Inventory Management < 4.2.9 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler'