WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
admail
Published
2025-04-04
Title
AdMail – Multilingual Back in-Stock Notifier for WooCommerce <= 1.7.0 - Missing Authorization
Slug
admin-and-client-message-after-order-for-woocommerce
Published
2024-04-25
Title
OrderConvo < 12.5 - Missing Authorization to Arbitrary File Upload
Slug
admin-and-client-message-after-order-for-woocommerce
Published
2025-01-15
Title
Admin and Customer Messages After Order for WooCommerce < 13.3 - Authenticated (Subscriber+) Limited File Upload to Cross-Site Scripting
Slug
admin-and-client-message-after-order-for-woocommerce
Published
2025-09-16
Title
OrderConvo < 14 - Unauthenticated Arbitrary File Read
Slug
admin-and-client-message-after-order-for-woocommerce
Published
2025-11-24
Title
Admin and Customer Messages After Order for WooCommerce: OrderConvo < 15 - Missing Authorization to Unauthenticated User Impersonation in Order Messages
Slug
admin-and-client-message-after-order-for-woocommerce
Published
2025-11-24
Title
Admin and Customer Messages After Order for WooCommerce: OrderConvo < 15 - Missing Authorization to Unauthenticated Information Disclosure
Slug
admin-bar
Published
2024-04-26
Title
Admin Bar Remover < 1.0.23 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
admin-bar-dashboard-control
Published
2023-10-31
Title
Admin Bar & Dashboard Control < 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
admin-block-country
Published
2023-02-23
Title
Admin Block Country <= 7.1.4 - Cross-Site Request Forgery (CSRF)
Slug
admin-bookmarks
Published
2025-04-24
Title
Custom Admin-Bar Favorites <= 0.1 - Reflected Cross-Site Scripting
Slug
admin-cleanup
Published
2025-01-16
Title
Admin Cleanup <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
admin-columns-pro
Published
2021-05-31
Title
Admin Columns Free < 4.3 & Pro < 5.5.1 - Admin+ Stored XSS in Label
Slug
admin-columns-pro
Published
2021-05-31
Title
Admin Columns Free (< 4.3.2) & Pro (< 5.5.2) - Authenticated Stored Cross-Site Scripting (XSS) in Custom Field
Slug
admin-custom-login
Published
2017-03-01
Title
Admin Custom Login < 2.4.8 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
admin-custom-login
Published
2021-07-28
Title
Admin Custom Login < 3.2.8 - CSRF to Stored XSS
Slug
admin-dashboard-rss-feed
Published
2024-07-11
Title
Admin Dashboard RSS Feed < 3.4 - Administrator+ Stored XSS
Slug
admin-font-editor
Published
2016-04-13
Title
Admin Font Editor <= 1.8 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
admin-form
Published
2024-05-07
Title
ADFO – Custom data in admin dashboard < 1.9.1 - Cross-Site Request Forgery
Slug
admin-form
Published
2024-05-07
Title
ADFO – Custom data in admin dashboard < 1.9.1 - Reflected Cross-Site Scripting
Slug
admin-form
Published
2025-02-18
Title
ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
admin-form
Published
2025-02-24
Title
ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Admin+) PHP Object Injection
Slug
admin-in-english-with-switch
Published
2025-09-10
Title
Admin in English with Switch <= 1.1 - Cross-Site Request Forgery
Slug
admin-log
Published
2023-03-20
Title
Admin Log <= 1.50 - CSRF
Slug
admin-login-url-change
Published
2026-01-20
Title
Admin login URL Change <= 1.1.5 - Missing Authorization
Slug
admin-management-xtended
Published
2015-12-14
Title
Admin Management Xtended <= 2.4.0 - Privilege Escalation