WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
astra-pro-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.5 - Incorrect Authorization
Slug
astra-pro-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
astra-sites
Published
2021-11-11
Title
Starter Templates < 2.7.1 - Contributor+ Block Import to Stored XSS
Slug
astra-sites
Published
2023-02-20
Title
Starter Templates <= 3.1.20 - Settings Update via CSRF
Slug
astra-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.5 - Incorrect Authorization
Slug
astra-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
astra-sites
Published
2024-05-08
Title
Starter Templates — Elementor, WordPress & Beaver Builder Templates < 4.1.7 - Contributor+ Server-Side Request Forgery
Slug
astra-sites
Published
2024-05-10
Title
Starter Templates — Elementor, WordPress & Beaver Builder Templates < 4.2.2 - Contributor+ Stored Cross-Site Scripting
Slug
astra-sites
Published
2024-09-27
Title
Starter Templates < 4.4.1 - Author+ Stored XSS
Slug
astra-sites
Published
2025-01-24
Title
Starter Templates < 4.4.10 - Cross-Site Request Forgery
Slug
astra-sites
Published
2025-12-05
Title
Starter Templates < 4.4.42 - Author+ Arbitrary File Upload via WXR Upload Bypass
Slug
astra-sites
Published
2026-09-10
Title
Starter Templates < 4.7.6 - Contributor+ IDOR
Slug
astra-sites
Published
2026-10-05
Title
Starter Templates < 4.7.8 - Contributor+ Missing Authorization
Slug
astra-sites
Published
2026-10-05
Title
Starter Templates < 4.7.8 - Contributor+ Stored XSS
Slug
astra-widgets
Published
2024-10-24
Title
Astra Widgets < 1.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
astra-widgets
Published
2025-01-03
Title
Astra Widgets < 1.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
astra-widgets
Published
2025-12-28
Title
Astra Widgets < 1.2.17 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
astro-booking-engine
Published
2026-08-13
Title
Astro Booking Engine < 1.4.1 - Cross-Site Request Forgery to Settings Reset
Slug
asvereinbase
Published
2026-10-22
Title
asVereinbase < 1.1.8 - Unauthenticated Authentication Bypass via 2FA Validation
Slug
async-javascript
Published
2020-02-27
Title
Async Javascript < 2.20.02.27 - Subscriber+ Stored XSS via Plugin Settings Change
Slug
async-javascript
Published
2021-06-13
Title
Async JavaScript < 2.21.06.29 - Authenticated (admin+) Stored XSS
Slug
asynchronous-javascript
Published
2026-01-27
Title
Asynchronous Javascript <= 1.3.5 - Reflected Cross-Site Scripting
Slug
at-internet
Published
2025-04-10
Title
AT Internet SmartTag <= 0.2 - Reflected Cross-Site Scripting
Slug
atarapay-woocommerce
Published
2024-11-18
Title
AtaraPay WooCommerce Payment Gateway <= 2.0.13 - Reflected Cross-Site Scripting
Slug
atarim-visual-collaboration
Published
2023-09-04
Title
Atarim < 3.9.4 - Admin+ Stored XSS