WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
add-search-to-menu
Published
2024-09-04
Title
Ivory Search – WordPress Search Plugin < 5.5.7 - Information Exposure via AJAX Search Form
Slug
add-search-to-menu
Published
2025-05-27
Title
Ivory Search < 5.5.10 - Admin+ Stored XSS
Slug
add-search-to-menu
Published
2025-09-28
Title
Ivory Search < 5.5.13 - Missing Authorization
Slug
add-search-to-menu
Published
2026-01-27
Title
Ivory Search < 5.5.14 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters
Slug
add-social-share-buttons
Published
2018-06-07
Title
Add Social Share Buttons for Whatsapp and Viber < 1.1 - CSRF to Settings Change
Slug
add-subtitle
Published
2022-01-26
Title
Add Subtitle <= 1.1.0 - Contributor+ Stored Cross-Site Scripting
Slug
add-svg-support-for-media-uploader-inventivo
Published
2024-01-23
Title
Add SVG Support for Media Uploader | inventivo <= 1.0.5 - Author+ Stored XSS via SVG
Slug
add-tabs-xforwc
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
add-tiktok-advertising-pixel
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
add-to-all
Published
2025-04-01
Title
WebberZone Snippetz < 2.2.0 - Contributor+ Stored XSS
Slug
add-to-any
Published
2017-08-16
Title
AddToAny Share Buttons <= 1.7.14 - Conditional Host Header Injection
Slug
add-to-any
Published
2021-08-09
Title
AddToAny < 1.7.46 - Admin+ Stored XSS
Slug
add-to-any
Published
2021-08-10
Title
AddToAny Share Buttons < 1.7.48 - Admin+ Stored Cross-Site Scripting
Slug
add-to-calendar-button
Published
2023-11-08
Title
Add to Calendar Button < 1.5.1 - Contributor+ Stored XSS
Slug
add-to-cart-button-labels-for-woocommerce
Published
2025-05-19
Title
Change Add to Cart Button Text for WooCommerce < 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
add-to-cart-direct-checkout-for-woocommerce
Published
2023-06-26
Title
Direct checkout, Add to cart redirect for Woocommerce < 2.1.49 - Admin+ Stored XSS
Slug
add-to-feedly
Published
2023-05-02
Title
Add to Feedly <= 1.2.11 - Admin+ Stored XSS
Slug
add-to-feedly
Published
2025-09-05
Title
Add to Feedly <= 1.2.11 - Cross-Site Request Forgery
Slug
add-to-header
Published
2025-04-17
Title
Add to Header <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
add-twitter-pixel
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
add-user-meta
Published
2025-08-14
Title
Add User Meta <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
add-user-role
Published
2022-08-30
Title
Add User Role <= 0.0.1 - Admin+ Stored Cross-Site Scripting
Slug
add-whatsapp-button
Published
2024-11-20
Title
Add Chat App Button < 2.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
add-widget-after-content
Published
2024-10-17
Title
Add Widget After Content < 2.5 - Admin+ Stored XSS
Slug
add-widgets-to-page
Published
2023-11-15
Title
Add Widgets to Page <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting