WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ad-inserter-pro
Published
2025-02-03
Title
Ad Inserter Pro < 2.8.0 - Reflected Cross-Site Scripting
Slug
ad-invalid-click-protector
Published
2022-01-14
Title
Ad Invalid Click Protector (AICP) < 1.2.6 - Authenticated SQL Injection
Slug
ad-invalid-click-protector
Published
2022-04-05
Title
Ad Invalid Click Protector (AICP) < 1.2.7 - Reflected Cross-Site Scripting
Slug
ad-invalid-click-protector
Published
2022-04-05
Title
Ad Invalid Click Protector (AICP) < 1.2.7 - Arbitrary Ban Deletion via CSRF
Slug
ad-invalid-click-protector
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
ad-manager-wd
Published
2019-01-25
Title
Download Ad Manager by WD - Arbitrary File Download
Slug
ad-minister
Published
2013-12-05
Title
Ad-minister 0.6 - Authenticated Cross-Site Scripting (XSS)
Slug
ad-short
Published
2026-03-20
Title
Ad Short <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'client' Shortcode Attribute
Slug
ad-sliding-faq
Published
2026-01-06
Title
AD Sliding FAQ <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
ad-swapper
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
Slug
ad-widget
Published
2017-04-04
Title
WordPress Ad Widget < 2.12.0 - Authenticated Local File Inclusion (LFI)
Slug
ad-widget
Published
2024-04-26
Title
WordPress Ad Widget <= 2.20.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
adamrob-parallax-scroll
Published
2019-02-06
Title
Parallax Scroll < 2.1 - Cross-Site Scripting (XSS)
Slug
adapta-rgpd
Published
2021-06-30
Title
Adapta RGPD < 1.3.3 - Unauthorised Consent via CSRF
Slug
adaptive-images
Published
2019-07-19
Title
Adaptive Images for WordPress <= 0.6.66 - Local File Inclusion & Deletion
Slug
adaptive-images
Published
2022-01-11
Title
Adaptive Images < 0.6.69 - Reflected Cross-Site Scripting
Slug
adblock-notify-by-bweb
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
adblock-notify-by-bweb
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
adblock-notify-by-bweb
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
adbuddy-adblocker-detection
Published
2024-11-07
Title
adBuddy+ (AdBlocker Detection) by NetfunkDesign <= 1.1.3 - Admin+ Stored XSS
Slug
add-actions-and-filters
Published
2022-09-12
Title
Add Shortcodes Actions And Filters <= 2.10 - Admin+ Stored XSS
Slug
add-actions-and-filters
Published
2023-09-29
Title
Add Shortcodes Actions And Filters < 2.10 - Settings Update via CSRF
Slug
add-actions-and-filters
Published
2023-10-16
Title
Add Shortcodes Actions And Filters < 2.10 - Reflected XSS
Slug
add-actions-and-filters
Published
2024-03-29
Title
Add Shortcodes Actions And Filters <= 2.10 - Reflected Cross-Site Scripting
Slug
add-admin-css
Published
2024-07-26
Title
Add Admin CSS < 2.5 - Unauthenticated Full Path Dislcosure