WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-google-recaptcha
Published
2025-03-27
Title
Advanced Google reCAPTCHA < 1.30 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter
Slug
advanced-google-universal-analytics
Published
2025-07-28
Title
Advanced Google Universal Analytics <= 1.0.3 - Missing Authorization
Slug
advanced-gutenberg
Published
2025-07-01
Title
Gutenberg Blocks < 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-gutenberg
Published
2025-07-28
Title
Gutenberg Blocks < 3.3.2 - Unauthenticated Local File Inclusion
Slug
advanced-gutenberg
Published
2025-10-24
Title
Gutenberg Blocks – PublishPress Blocks Controls, Visibility, Reusable Blocks < 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2022-02-02
Title
Advanced iFrame < 2022 - Reflected Cross-Site Scripting
Slug
advanced-iframe
Published
2023-11-09
Title
Advanced iFrame < 2023.9 - Contributor+ Stored XSS
Slug
advanced-iframe
Published
2024-01-31
Title
Advanced iFrame < 2024.0 - Contributor+ Stored XSS
Slug
advanced-iframe
Published
2024-02-28
Title
Advanced iFrame < 2024.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2024-04-11
Title
Advanced iFrame < 2024.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
advanced-iframe
Published
2024-05-22
Title
Advanced iFrame < 2024.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2025-03-25
Title
Advanced iFrame < 2025.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header
Slug
advanced-iframe
Published
2025-03-25
Title
Advanced iFrame < 2025.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2025-03-25
Title
Advanced iFrame < 2025.0 - Unauthenticated Settings Update
Slug
advanced-iframe
Published
2025-07-25
Title
Advanced iFrame < 2025.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2025-08-15
Title
Advanced iFrame < 2025.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2026-01-19
Title
Advanced iFrame < 2026.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-image-sitemap
Published
2022-04-19
Title
Advanced Image Sitemap <= 1.2 - Reflected Cross-Site Scripting
Slug
advanced-import
Published
2022-11-14
Title
Advanced Import < 1.3.8 - Arbitrary Plugin Installation & Activation via CSRF
Slug
advanced-lazy-load
Published
2025-04-24
Title
Advanced lazy load <= 1.6.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
advanced-local-pickup-for-woocommerce
Published
2023-10-21
Title
Advanced Local Pickup for WooCommerce < 1.6.0 - Authenticated (Administrator+) SQL Injection
Slug
advanced-local-pickup-for-woocommerce
Published
2024-04-05
Title
Advanced Local Pickup for WooCommerce < 1.6.3 - Missing Authorization
Slug
advanced-local-pickup-for-woocommerce
Published
2024-04-22
Title
Advanced Local Pickup for WooCommerce < 1.6.2 - Missing Authorization to Notice Dismissal
Slug
advanced-menu-widget
Published
2023-10-23
Title
Advanced Menu Widget <= 0.4.1 - Contributor+ Stored XSS via Shortcode
Slug
advanced-most-recent-posts-mod
Published
2024-04-25
Title
Advanced Most Recent Posts Mod <= 1.6.5.2 - Authenticated (Author+) Stored Cross-Site Scripting