WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-classifieds-and-directory-pro
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-classifieds-and-directory-pro
Published
2024-03-19
Title
Advanced Classifieds & Directory Pro < 3.1.2 - Missing Authorization to Arbitrary Attachment Deletion
Slug
advanced-classifieds-and-directory-pro
Published
2024-07-04
Title
Advanced Classifieds & Directory Pro < 3.2.1 - Authenticated (Contributor+) Local File Inclusion
Slug
advanced-classifieds-and-directory-pro
Published
2025-12-24
Title
Advanced Classifieds & Directory Pro < 3.3.0 - Cross-Site Request Forgery
Slug
advanced-control-manager
Published
2024-10-31
Title
Advanced Control Manager for WordPress by ItalyStrap <= 2.16.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-control-manager
Published
2024-12-05
Title
Advanced Control Manager for WordPress by ItalyStrap <= 2.16.0 - Reflected Cross-Site Scripting
Slug
advanced-country-blocker
Published
2026-02-06
Title
Advanced Country Blocker <= 2.3.1 - Unauthenticated Authorization Bypass
Slug
advanced-coupons-for-woocommerce-free
Published
2022-11-30
Title
Advanced Coupons for WooCommerce Coupons < 4.5.0.1 - Notice Dismiss via CSRF
Slug
advanced-coupons-for-woocommerce-free
Published
2025-10-16
Title
Advanced Coupons for WooCommerce Coupons < 4.6.9 - Authenticated (Shop manager+) SQL Injection
Slug
advanced-cron-manager
Published
2022-01-04
Title
Advanced Cron Manager - Subscriber+ Arbitrary Events/Schedules Creation/Deletion
Slug
advanced-cron-manager
Published
2024-04-10
Title
Advanced Cron Manager – debug & control < 2.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
advanced-cron-manager
Published
2024-08-07
Title
Advanced Cron Manager – debug & control < 2.5.10 - Missing Authorization
Slug
advanced-cron-manager
Published
2024-04-05
Title
Advanced Cron Manager < 2.5.7 - Admin+ Stored XSS
Slug
advanced-cron-manager-pro
Published
2022-01-04
Title
Advanced Cron Manager - Subscriber+ Arbitrary Events/Schedules Creation/Deletion
Slug
advanced-css3-related-posts-widget
Published
2025-03-31
Title
Related Posts Widget with Thumbnails <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
advanced-custom-css
Published
2025-12-26
Title
Advanced Custom CSS <= 1.1.0 - Reflected Cross-Site Scripting
Slug
advanced-custom-fields
Published
2014-08-01
Title
Advanced Custom Fields <= 3.5.1 - Remote File Inclusion
Slug
advanced-custom-fields
Published
2018-12-07
Title
Advanced Custom Fields <= 5.7.7 - Authenticated Cross-Site Scripting (XSS)
Slug
advanced-custom-fields
Published
2019-02-15
Title
Advanced Custom Fields < 5.7.12 - Unserialize of user input
Slug
advanced-custom-fields
Published
2021-01-06
Title
Advanced Custom Fields < 5.8.12 - Cross-Site Scripting in Select2 dropdowns
Slug
advanced-custom-fields
Published
2021-08-25
Title
Advanced Custom Fields < 5.11 - Subscriber+ Arbitrary ACF Data/Field Groups View and Fields Move
Slug
advanced-custom-fields
Published
2022-03-30
Title
Advanced Custom Fields < 5.12.1 - Contributor+ Database Information Access
Slug
advanced-custom-fields
Published
2022-08-01
Title
Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload
Slug
advanced-custom-fields
Published
2023-04-10
Title
Advanced Custom Fields < 5.12.5 - Contributor+ PHP Object Injection
Slug
advanced-custom-fields
Published
2023-04-10
Title
Advanced Custom Fields < 6.1.0 - Contributor+ PHP Object Injection