WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
a-forms
Published
2014-08-01
Title
A Forms 1.4.0 - a-forms.php a_form_tracking_page FunctionMultiple Parameters SQL Injection
Slug
a-forms
Published
2014-08-01
Title
A Forms 1.4.0 - Form Submission CSRF
Slug
a-forms
Published
2014-08-01
Title
A Forms 1.4.0 - a-forms.php a_form_shortcode Function Multiple Parameter XSS
Slug
a-forms
Published
2014-08-01
Title
A Forms 1.4.0 - a-forms.php aform_css_file_selector() Function css_file_selection Parameter XSS
Slug
a-forms
Published
2014-08-01
Title
A Forms 1.4.0 - a-forms.php add_field_to_section Function Multiple Parameter XSS
Slug
a-forms
Published
2014-08-01
Title
A Forms 1.4.0 - a-forms.php a_form_initial_page Function Multiple Parameter XSS
Slug
a-forms
Published
2014-08-01
Title
A Forms 1.4.0 - a-forms.php a_form_page Function Multiple Parameter XSS
Slug
a-forms
Published
2014-08-01
Title
A Forms 1.4.0 - a-forms.php a_form_section_page Function message Parameter XSS
Slug
a-forms
Published
2014-08-01
Title
A Forms 1.4.0 - a-forms.php a_form_tracking_page Function Multiple Parameter XSS
Slug
a-gallery
Published
2014-08-01
Title
A Gallery 0.9 - Shell Upload
Slug
a-gateway-for-pasargad-bank-on-woocommerce
Published
2025-01-16
Title
Gateway for Pasargad Bank <= 2.5.2 - Reflected Cross-Site Scripting
Slug
a-simple-multilanguage
Published
2025-10-02
Title
A Simple Multilanguage Plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
a-staff
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
a-staff
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
a-staff
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
a-team-showcase
Published
2025-06-04
Title
Team Builder <= 1.5.7 - Missing Authorization
Slug
a-to-z-category-listing
Published
2014-08-01
Title
A to Z Category Listing <= 1.3 - SQL Injection
Slug
a1post-bg-shipping-for-woocommerce
Published
2025-02-21
Title
A1POST.BG Shipping for WooCommerce < 1.5.1 - Privilege Escalation via CSRF
Slug
a2-optimized-wp
Published
2023-02-06
Title
A2 Optimized WP < 3.0.5 - Data Collection Toggle via CSRF
Slug
a3-lazy-load
Published
2025-12-12
Title
a3 Lazy Load < 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
a3-portfolio
Published
2023-08-14
Title
a3 Portfolio < 3.1.1 - Author+ Stored XSS
Slug
a3-user-importer
Published
2025-11-17
Title
Simple User Import Export <= 1.1.7 - Authenticated (Admin+) CSV Injection
Slug
a4-barcode-generator
Published
2024-04-29
Title
Print Labels with Barcodes < 3.4.7 - Subscriber+ Settings/Profiles Update, Templates/Barcodes Access/Creation/Edition/Deletion
Slug
a4-barcode-generator
Published
2024-04-29
Title
Print Labels with Barcodes < 3.4.7 - Subscriber+ Stored XSS
Slug
a4-barcode-generator
Published
2024-08-16
Title
Print Barcode Labels for your WooCommerce products/orders < 3.4.10 - Missing Authorization