WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
add-multiple-marker
Published
2022-11-11
Title
Add Multiple Marker <= 1.3 - Settings Update via CSRF
Slug
add-multiple-marker
Published
2022-11-11
Title
Add Multiple Marker <= 1.3 - Unauthenticated Settings Update
Slug
add-multiple-marker
Published
2025-11-10
Title
Add Multiple Marker <= 1.2 - Missing Authorization to Unauthenticated Settings Update
Slug
add-pinterest-conversion-tags
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
add-pinterest-conversion-tags
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
add-polylang-support-for-customizer
Published
2026-01-04
Title
Add Polylang support for Customizer <= 1.4.5 - Cross-Site Request Forgery
Slug
add-posts-to-pages
Published
2023-05-11
Title
Add Posts to Pages <= 1.4.1 - Contributor+ Stored XSS
Slug
add-product-frontend-for-woocommerce
Published
2025-04-11
Title
Add Product Frontend for WooCommerce <= 1.0.8 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Slug
add-replace-affiliate-links-for-amazon
Published
2025-06-27
Title
Add & Replace Affiliate Links for Amazon <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
add-ribbon
Published
2024-11-08
Title
Add Ribbon Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
add-rss
Published
2025-01-16
Title
Add RSS <= 1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
add-search-to-menu
Published
2021-02-01
Title
Ivory Search < 4.5.11 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
add-search-to-menu
Published
2021-03-30
Title
Ivory Search < 4.6.1 - Reflected Cross Site Scripting (XSS)
Slug
add-search-to-menu
Published
2021-10-01
Title
Ivory Search < 4.7 - Reflected Cross-Site Scripting
Slug
add-search-to-menu
Published
2021-11-02
Title
Ivory Search < 4.8 - Contributor+ Stored Cross-Site Scripting
Slug
add-search-to-menu
Published
2022-01-10
Title
Ivory Search < 5.4.1 - Multiple Admin+ Stored Cross-Site Scripting
Slug
add-search-to-menu
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
add-search-to-menu
Published
2022-07-04
Title
Ivory Search < 5.4.7 - Reflected Cross-Site Scripting
Slug
add-search-to-menu
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
add-search-to-menu
Published
2024-04-12
Title
Ivory Search – WordPress Search Plugin < 5.5.6 - Subscriber+ Index Creation
Slug
add-search-to-menu
Published
2024-09-04
Title
Ivory Search – WordPress Search Plugin < 5.5.7 - Information Exposure via AJAX Search Form
Slug
add-search-to-menu
Published
2025-05-27
Title
Ivory Search < 5.5.10 - Admin+ Stored XSS
Slug
add-search-to-menu
Published
2025-09-28
Title
Ivory Search < 5.5.13 - Missing Authorization
Slug
add-social-share-buttons
Published
2018-06-07
Title
Add Social Share Buttons for Whatsapp and Viber < 1.1 - CSRF to Settings Change
Slug
add-subtitle
Published
2022-01-26
Title
Add Subtitle <= 1.1.0 - Contributor+ Stored Cross-Site Scripting