WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
automation-web-platform
Published
2025-12-31
Title
Wawp < 4.5 - Missing Authorization
Slug
automation-web-platform
Published
2026-08-20
Title
Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure
Slug
automatorwp
Published
2021-09-28
Title
AutomatorWP < 1.7.6 - Missing Authorization and Privilege Escalation
Slug
automatorwp
Published
2023-01-20
Title
AutomatorWP < 2.5.1 - Object Deletion via CSRF
Slug
automatorwp
Published
2024-12-18
Title
AutomatorWP < 5.1.0 - Reflected Cross-Site Scripting via a-0-o-search_field_value
Slug
automatorwp
Published
2025-05-19
Title
AutomatorWP < 5.2.2 - Authenticated (Administrator+) SQL Injection
Slug
automatorwp
Published
2025-06-13
Title
AutomatorWP < 5.2.6 - Authenticated (Administrator+) SQL Injection via field_conditions
Slug
automatorwp
Published
2025-09-08
Title
AutomatorWP < 5.3.8 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
Slug
automatorwp
Published
2025-09-08
Title
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress < 5.3.7 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation
Slug
automatorwp
Published
2025-06-19
Title
AutomatorWP < 5.2.5 - Authenticated (Administrator+) SQL Injection
Slug
automatorwp
Published
2026-04-23
Title
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress < 5.6.8 - Missing Authorization
Slug
automatorwp
Published
2026-04-29
Title
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress < 5.6.8 - Unauthenticated Stored Cross-Site Scripting
Slug
automatorwp
Published
2026-06-03
Title
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress < 5.7.3 - Unauthenticated Stored Cross-Site Scripting
Slug
automatorwp
Published
2026-08-21
Title
AutomatorWP < 5.8.5 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action
Slug
automatorwp
Published
2026-08-21
Title
AutomatorWP < 5.8.5 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Action
Slug
automatorwp
Published
2026-08-24
Title
AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI < 5.8.4 - Missing Authorization
Slug
automizy-gravity-forms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
automizy-gravity-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
automotive
Published
2026-01-05
Title
Automotive Listings < 18.7 - Unauthenticated SQL Injection
Slug
automotive
Published
2026-06-29
Title
Automotive Listings <= 18.6 - Reflected Cross-Site Scripting
Slug
autonettv-relay
Published
2026-08-06
Title
AutoNetTV Relay < 3.0.14 - Unauthenticated Privilege Escalation via Scheduled Sync Cron
Slug
autopilot
Published
2024-11-19
Title
Ortto < 1.0.21 - Reflected Cross-Site Scripting
Slug
autoptimize
Published
2020-08-24
Title
Autoptimize < 2.7.7 - Authenticated Arbitrary File Upload
Slug
autoptimize
Published
2021-05-07
Title
Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
autoptimize
Published
2020-10-09
Title
Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"