WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
achilles-shortcodes
Published
2024-11-08
Title
AchillesTheme-shortcodes <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
acknowledgify
Published
2025-10-16
Title
Acknowledgify < 1.1.4 - Missing Authorization
Slug
acl-floating-cart-for-woocommerce
Published
2024-10-21
Title
ACL Floating Cart for WooCommerce <= 0.9 - Reflected Cross-Site Scripting
Slug
acme-divi-modules
Published
2025-03-31
Title
ACME Divi Modules <= 1.3.5 - Missing Authorization
Slug
acme-fix-images
Published
2023-11-15
Title
Acme Fix Images < 2.0.0 - Subscriber+ Image Resizing
Slug
acnoo-flutter-api
Published
2024-10-25
Title
Acnoo Flutter API <= 1.0.5 - Authentication Bypass
Slug
aco-product-labels-for-woocommerce
Published
2024-02-05
Title
Product Labels For Woocommerce < 1.5.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Slug
aco-product-labels-for-woocommerce
Published
2024-12-02
Title
Product Labels For Woocommerce < 1.5.9 - Authenticated (Administrator+) SQL Injection
Slug
aco-product-labels-for-woocommerce
Published
2025-03-03
Title
Product Labels For Woocommerce < 1.5.11 - Admin+ SQLi
Slug
aco-product-labels-for-woocommerce
Published
2025-03-03
Title
Product Labels For Woocommerce < 1.5.9 - Admin+ SQLi
Slug
aco-wishlist-for-woocommerce
Published
2025-11-11
Title
Wishlist and Save for later for Woocommerce < 1.1.23 - Insecure Direct Object Reference to Authenticated (Subscriber+) Wishlist Item Deletion
Slug
aco-woo-dynamic-pricing
Published
2025-05-07
Title
Dynamic Pricing With Discount Rules for WooCommerce < 4.5.9 - Authenticated (Shop manager+) SQL Injection
Slug
aco-woo-dynamic-pricing
Published
2025-08-14
Title
Dynamic Pricing With Discount Rules for WooCommerce < 4.5.10 - Authenticated (Shop Manager+) Arbitrary Code Execution
Slug
acobot
Published
2015-02-22
Title
Acobot Live Chat & Contact Form <= 2.0 - CSRF/XSS
Slug
actionwear-products-sync
Published
2025-02-17
Title
Actionwear products sync < 2.3.3 - Unauthenticated Full Patch Disclosure
Slug
actionwear-products-sync
Published
2025-03-31
Title
Actionwear products sync <= 2.3.3 - Authenticated (Subscriber+) SQL Injection
Slug
actionwear-products-sync
Published
2025-12-06
Title
Actionwear products sync <= 2.3.3 - Missing Authorization
Slug
active-directory-integration
Published
2017-11-03
Title
Active Directory Integration <= 1.1.8 - Authenticated SQL Injection
Slug
active-user
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
activecampaign-for-woocommerce
Published
2022-12-16
Title
ActiveCampaign for WooCommerce < 1.9.8 - Subscriber+ Error Log Cleanup
Slug
activecampaign-subscription-forms
Published
2020-09-06
Title
ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in Settings
Slug
activecampaign-subscription-forms
Published
2023-04-20
Title
ActiveCampaign < 8.1.12 - Contributor+ Stored XSS
Slug
activecampaign-subscription-forms
Published
2024-04-12
Title
ActiveCampaign < 8.1.15 - Authenticated (Administrator+) Server-Side Request Forgery
Slug
activecampaign-subscription-forms
Published
2025-04-04
Title
ActiveCampaign < 8.1.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
activedemand
Published
2022-08-06
Title
ActiveDEMAND plugin < 0.2.28 - Unauthenticated Post Creation/Update/Deletion