WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
awin-data-feed
Published
2022-06-16
Title
Awin Data Feed < 1.8 - Unauthenticated Stored Cross-Site Scripting
Slug
awin-data-feed
Published
2022-06-16
Title
Awin Data Feed < 1.8 - Reflected Cross-Site Scripting
Slug
aws-cdn-by-wpadmin
Published
2023-07-11
Title
WPAdmin AWS CDN < 3.0.0 - Cross-Site Request Forgery
Slug
awsa-shipping
Published
2025-04-10
Title
AWSA Shipping <= 1.3.0 - Reflected Cross-Site Scripting
Slug
awsm-team
Published
2024-07-01
Title
AWSM Team < 1.3.2 - Authenticated (Contributor+) Local File Inclusion
Slug
awsom-news-announcement
Published
2024-05-06
Title
AWSOM News Announcement <= 1.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
awstats-script
Published
2025-08-17
Title
AWStats Script <= 0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
axeptio-sdk-integration
Published
2024-12-11
Title
Axeptio < 2.5.5 - Unauthenticated Local File Inclusion
Slug
axima-payment-gateway
Published
2025-05-07
Title
Pays – WooCommerce Payment Gateway < 2.7 - Cross-Site Request Forgery
Slug
axle-demo-importer
Published
2025-05-20
Title
Axle Demo Importer <= 1.0.3 - Author+ Arbitrary File Upload
Slug
ayecode-connect
Published
2024-12-30
Title
AyeCode Connect < 1.3.9 - Missing Authorization
Slug
ayo-shortcodes
Published
2025-12-11
Title
Ayo Shortcodes <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute
Slug
ays-chatgpt-assistant
Published
2024-09-05
Title
AI Chatbot with ChatGPT by AYS <= 2.0.9 - Unauthenticated OpenAI Key Disclosure
Slug
ays-chatgpt-assistant
Published
2024-09-05
Title
AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls
Slug
ays-chatgpt-assistant
Published
2025-10-11
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.6.7 - Unauthenticated Information Exposure
Slug
ays-chatgpt-assistant
Published
2025-11-26
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.7.1 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter
Slug
ays-chatgpt-assistant
Published
2025-11-26
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.7.1 - Missing Authorization to Unauthenticated Media File Uploads
Slug
ays-chatgpt-assistant
Published
2026-03-02
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.7.6 - Missing Authorization to Unauthenticated API Key Modification
Slug
ays-chatgpt-assistant
Published
2026-02-08
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.7.5 - Missing Authorization
Slug
ays-facebook-popup-likebox
Published
2021-06-29
Title
Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections
Slug
ays-facebook-popup-likebox
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Slug
ays-facebook-popup-likebox
Published
2022-03-07
Title
Popup Like box < 3.6.1 - Reflected Cross-Site Scripting
Slug
ays-facebook-popup-likebox
Published
2024-04-10
Title
Popup Like box – Page < 3.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ays-facebook-popup-likebox
Published
2026-03-01
Title
Popup Like box < 3.7.8 - Missing Authorization
Slug
ays-popup-box
Published
2021-06-29
Title
Popup box < 2.3.4 - Authenticated Blind SQL Injections