WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
add-admin-javascript
Published
2024-07-26
Title
Add Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosure
Slug
add-any-extension-to-pages
Published
2017-04-14
Title
Add Any Extension to Pages <= 1.3 - XSS
Slug
add-any-extension-to-pages
Published
2023-12-22
Title
Add Any Extension to Pages < 1.5 - Cross-Site Request Forgery via aaetp_options_page
Slug
add-categories-post-footer
Published
2024-10-14
Title
Add Categories Post Footer <= 2.2.2 - Reflected Cross-Site Scripting
Slug
add-code-to-head
Published
2025-08-25
Title
Add Code To Head < 1.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
add-comments
Published
2022-11-10
Title
Add Comments <= 1.0.1 - Admin+ Stored XSS
Slug
add-custom-body-class
Published
2023-10-20
Title
Add Custom Body Class <= 1.4.1 - Contributor+ Stored Cross-Site Scripting
Slug
add-custom-codes
Published
2025-08-14
Title
Add Custom Codes < 5.0 - Authenticated (Contributor+) Remote Code Execution
Slug
add-custom-codes
Published
2025-12-05
Title
Add Custom Codes < 5.0 - Cross-Site Request Forgery
Slug
add-custom-codes
Published
2025-12-31
Title
Add Custom Codes < 5.0 - Missing Authorization
Slug
add-custom-codes
Published
2025-12-31
Title
Add Custom Codes < 5.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
add-custom-content-after-post
Published
2025-01-16
Title
Add custom content after post <= 1.0 - Reflected Cross-Site Scripting
Slug
add-custom-css-and-js
Published
2024-04-18
Title
Add Custom CSS and JS <= 1.20 - Stored XSS via CSRF
Slug
add-custom-fields-to-media
Published
2026-03-18
Title
Add Custom Fields to Media < 2.0.4 - Cross-Site Request Forgery to Custom Field Deletion via 'delete' Parameter
Slug
add-custom-google-tag-manager
Published
2025-01-16
Title
add custom google tag manager <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
add-custom-page-template
Published
2025-04-25
Title
Add custom page template <= 2.0.1 - Authenticated (Administrator+) PHP Code Injection to Remote Code Execution
Slug
add-customer-for-woocommerce
Published
2024-02-01
Title
Add Customer for WooCommerce < 1.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
add-edit-delete-listing-for-member-module
Published
2017-07-05
Title
Add Edit Delete Listing For Member Module <= 1.0 - SQL Injection
Slug
add-expires-headers
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
add-expires-headers
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
add-expires-headers
Published
2026-01-09
Title
Add Expires Headers & Optimized Minify < 3.3.0 - Missing Authorization
Slug
add-expires-headers
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
add-facebook
Published
2023-11-06
Title
Social Feed <= 1.5.4.6 - Author+ Stored XSS
Slug
add-facebook
Published
2023-11-03
Title
Social Feed | All social media in one place <= 1.5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting]
Slug
add-fields-to-checkout-page-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius