WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-dewplayer
Published
2014-08-01
Title
Advanced Dewplayer <= 1.2 - dewplayer.php Direct Request Path Disclosure Weakness
Slug
advanced-dewplayer
Published
2014-08-01
Title
Advanced Dewplayer <= 1.2 - download-file.php dew_file Parameter Traversal Arbitrary File Access
Slug
advanced-dewplayer
Published
2025-03-24
Title
Advanced Dewplayer <= 1.6 - Missing Authorization
Slug
advanced-dynamic-pricing-for-woocommerce
Published
2022-09-14
Title
Advanced Dynamic Pricing for WooCommerce < 4.1.4 - Settings Update via CSRF
Slug
advanced-dynamic-pricing-for-woocommerce
Published
2022-10-30
Title
Advanced Dynamic Pricing for WooCommerce < 4.1.6 - Settings Import via CSRF
Slug
advanced-dynamic-pricing-for-woocommerce
Published
2022-10-30
Title
Advanced Dynamic Pricing for WooCommerce < 4.1.6 - Rule Type Migration via CSRF
Slug
advanced-dynamic-pricing-for-woocommerce
Published
2025-01-05
Title
Advanced Dynamic Pricing for WooCommerce < 4.9.1 - Reflected Cross-Site Scripting
Slug
advanced-dynamic-pricing-for-woocommerce
Published
2025-04-17
Title
Advanced Dynamic Pricing for WooCommerce < 4.9.5 - Cross-Site Request Forgery to Settings Update
Slug
advanced-easy-shipping-for-wc-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-event-manager
Published
2024-11-22
Title
Advanced Event Manager <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-exchange-rates
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
advanced-exchange-rates
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-facebook-twitter-widget
Published
2024-02-20
Title
Advanced Social Feeds Widget & Shortcode <= 1.7 - Admin+ Stored XSS
Slug
advanced-fancybox
Published
2024-12-12
Title
Advanced Fancybox <= 1.1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
advanced-faq-manager
Published
2025-10-24
Title
Advanced FAQ Manager < 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-faq-manager
Published
2025-12-06
Title
Advanced FAQ Manager < 1.5.3 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
advanced-flamingo
Published
2024-01-08
Title
Advanced Flamingo <= 1.0 - Cross-Site Request Forgery
Slug
advanced-floating-content
Published
2024-12-23
Title
Advanced Floating Content < 3.8.3 - Authenticated (Subscriber+) SQL Injection
Slug
advanced-floating-content-lite
Published
2022-10-24
Title
Advanced Floating Content < 1.2.2 - Contributor+ XSS
Slug
advanced-floating-content-lite
Published
2024-04-22
Title
Advanced Floating Content Lite < 1.2.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
advanced-form-integration
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
advanced-form-integration
Published
2023-01-27
Title
Advanced Form Integration < 1.63.0 - Admin+ Stored XSS
Slug
advanced-form-integration
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-form-integration
Published
2023-12-21
Title
Advanced Form Integration < 1.76.0 - Authenticated(Administrator+) SQL Injection
Slug
advanced-form-integration
Published
2024-03-19
Title
Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms < 1.82.6 - SQL Injection to Reflected Cross-Site Scripting via integration_id