WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
add-custom-codes
Published
2025-12-31
Title
Add Custom Codes < 5.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
add-custom-content-after-post
Published
2025-01-16
Title
Add custom content after post <= 1.0 - Reflected Cross-Site Scripting
Slug
add-custom-css-and-js
Published
2024-04-18
Title
Add Custom CSS and JS <= 1.20 - Stored XSS via CSRF
Slug
add-custom-google-tag-manager
Published
2025-01-16
Title
add custom google tag manager <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
add-custom-page-template
Published
2025-04-25
Title
Add custom page template <= 2.0.1 - Authenticated (Administrator+) PHP Code Injection to Remote Code Execution
Slug
add-customer-for-woocommerce
Published
2024-02-01
Title
Add Customer for WooCommerce < 1.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
add-edit-delete-listing-for-member-module
Published
2017-07-05
Title
Add Edit Delete Listing For Member Module <= 1.0 - SQL Injection
Slug
add-expires-headers
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
add-expires-headers
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
add-expires-headers
Published
2026-01-09
Title
Add Expires Headers & Optimized Minify <= 3.1.0 - Missing Authorization
Slug
add-facebook
Published
2023-11-06
Title
Social Feed <= 1.5.4.6 - Author+ Stored XSS
Slug
add-facebook
Published
2023-11-03
Title
Social Feed | All social media in one place <= 1.5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting]
Slug
add-fields-to-checkout-page-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
add-fields-to-checkout-page-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
add-fields-to-checkout-page-woocommerce
Published
2024-03-22
Title
Custom WooCommerce Checkout Fields Editor < 1.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
add-fields-to-checkout-page-woocommerce
Published
2024-03-28
Title
Custom WooCommerce Checkout Fields Editor < 1.3.1 - Cross-Site Request Forgery
Slug
add-fields-to-checkout-page-woocommerce
Published
2024-04-30
Title
Custom WooCommerce Checkout Fields Editor < 1.3.2 - Missing Authorization
Slug
add-fields-to-checkout-page-woocommerce
Published
2025-09-05
Title
Custom WooCommerce Checkout Fields Editor <= 1.3.4 - Cross-Site Request Forgery
Slug
add-from-server
Published
2016-08-08
Title
Add From Server < 3.3.2 - Cross-Site Request Forgery (CSRF)
Slug
add-from-server
Published
2020-08-11
Title
Add From Server <= 3.3.3 - Authenticated Path Traversal to Arbitrary File Access
Slug
add-google-plus-one-social-share-button
Published
2025-04-24
Title
Add Google +1 (Plus one) social share Button <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
add-hierarchy-parent-to-post
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
add-image-to-post
Published
2024-12-12
Title
Add image to Post <= 0.6 - Cross-Site Request Forgery
Slug
add-infos-to-the-events-calendar
Published
2024-12-11
Title
Add infos to the events calendar < 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
add-instagram
Published
2023-07-07
Title
Image Social Feed <= 1.7.6 - Admin+ Stored XSS