WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-access-manager
Published
2024-03-20
Title
Advanced Access Manager < 6.9.21 - Reflected XSS
Slug
advanced-access-manager
Published
2026-05-14
Title
Advanced Access Manager – Access Governance for WordPress < 7.1.1 - Missing Authorization
Slug
advanced-accordion-block
Published
2025-04-23
Title
Advanced Accordion Gutenberg Block < 5.0.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
advanced-admin-search
Published
2022-05-17
Title
Advanced Admin Search < 1.1.6 - Reflected Cross-Site Scripting
Slug
advanced-ads
Published
2020-03-18
Title
Advanced Ads < 1.17.4 - Reflected XSS via Admin Dashboard
Slug
advanced-ads
Published
2022-09-27
Title
Advanced Ads < 1.32.0 - Admin+ Stored XSS
Slug
advanced-ads
Published
2024-05-07
Title
Advanced Ads – Ad Manager & AdSense < 1.52.2 - Authenticated (Admin+) PHP Object Injection
Slug
advanced-ads
Published
2024-05-07
Title
Advanced Ads – Ad Manager & AdSense < 1.52.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widget
Slug
advanced-ads
Published
2025-10-31
Title
Advanced Ads < 2.0.13 - Unauthenticated Limited Code Execution
Slug
advanced-ads
Published
2025-12-29
Title
Advanced Ads < 2.0.15 - Editor+ Remote Code Execution via Shortcode
Slug
advanced-ads
Published
2026-01-16
Title
Advanced Ads – Ad Manager & AdSense < 2.0.16 - Authenticated (Admin+) SQL Injection
Slug
advanced-ads
Published
2026-02-18
Title
Advanced Ads – Ad Manager & AdSense < 2.0.15 - Missing Authorization to Authenticated (Subscriber+) Ad Placements Update
Slug
advanced-ads
Published
2026-06-17
Title
Advanced Ads – Ad Manager & AdSense < 2.0.22 - Contributor+ Remote Code Execution
Slug
advanced-ads
Published
2026-07-06
Title
Advanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' Parameter
Slug
advanced-advertising-system
Published
2024-10-18
Title
Advanced Advertising System <= 1.3.1 - Unauthenticated PHP Object Injection
Slug
advanced-advertising-system
Published
2025-04-07
Title
Advanced Advertising System <= 1.3.1 - Open Redirect
Slug
advanced-ajax-page-loader
Published
2016-07-03
Title
Advanced Ajax Page Loader < 2.7.7 - Unauthenticated Uploaded File Disclosure
Slug
advanced-ajax-page-loader
Published
2024-07-08
Title
Advanced AJAX Page Loader <= 2.7.7 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
advanced-angular-contact-form
Published
2025-01-16
Title
Advanced Angular Contact Form <= 1.1.0 - Reflected Cross-Site Scripting
Slug
advanced-appointment-booking-scheduling
Published
2025-09-22
Title
Advanced Appointment Booking & Scheduling <= 1.9 - Cross-Site Request Forgery
Slug
advanced-backgrounds
Published
2024-09-10
Title
Advanced WordPress Backgrounds < 1.12.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via imageTag Parameter
Slug
advanced-blocks-pro
Published
2024-10-09
Title
Advanced Blocks Pro <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
advanced-blog-post-block
Published
2024-12-11
Title
Advanced Blog Post Block <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-booking-calendar
Published
2020-10-22
Title
Advanced Booking Calendar < 1.6.2 - Unauthenticated SQL Injection
Slug
advanced-booking-calendar
Published
2021-03-28
Title
Advanced Booking Calendar < 1.6.7 - Authenticated Reflected Cross-Site Scripting (XSS)