WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-booking-calendar
Published
2021-03-30
Title
Advanced Booking Calendar < 1.6.8 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
advanced-booking-calendar
Published
2022-02-28
Title
Advanced Booking Calendar < 1.7.0 - Unauthenticated SQL Injection
Slug
advanced-booking-calendar
Published
2022-03-21
Title
Advanced Booking Calendar < 1.7.1 - Admin+ SQLi
Slug
advanced-booking-calendar
Published
2022-03-21
Title
Advanced Booking Calendar < 1.7.1 - Reflected Cross-Site Scripting
Slug
advanced-booking-calendar
Published
2022-12-02
Title
Advanced Booking Calendar <= 1.7.1 - Unauthenticated SQLi
Slug
advanced-booking-calendar
Published
2022-12-01
Title
Advanced Booking Calendar <= 1.7.1 - CSRF
Slug
advanced-category-and-custom-taxonomy-image
Published
2024-10-17
Title
Advanced Category and Custom Taxonomy Image < 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_tax_image Shortcode
Slug
advanced-category-template
Published
2023-08-17
Title
Advanced Category Template <= 0.1 - Reflected XSS
Slug
advanced-category-template
Published
2023-12-19
Title
Advanced Category Template <= 0.1 - Cross-Site Request Forgery
Slug
advanced-cf7-database
Published
2025-01-03
Title
Contact Form 7 Database – CFDB7 <= 1.0.0 - Authenticated (Administrator+) SQL Injection
Slug
advanced-cf7-db
Published
2019-04-11
Title
Advanced Contact form 7 DB <= 1.6.0 - Authenticated SQL Injection
Slug
advanced-cf7-db
Published
2019-07-26
Title
Advanced Contact form 7 DB < 1.7.1 - SQL Injection
Slug
advanced-cf7-db
Published
2022-02-22
Title
Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletion
Slug
advanced-cf7-db
Published
2022-04-21
Title
Advanced Contact form 7 DB < 1.8.8 - Unauthenticated Stored Cross-Site Scripting
Slug
advanced-cf7-db
Published
2024-06-10
Title
Advanced Contact form 7 DB < 2.0.3 - Missing Authorization to Unauthenticated Information Disclosure
Slug
advanced-cf7-db
Published
2024-06-10
Title
Advanced Contact form 7 DB < 2.0.3 - Sensitive Information Exposure
Slug
advanced-cf7-db
Published
2026-04-08
Title
Advanced CF7 DB < 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export
Slug
advanced-cf7-db
Published
2026-04-08
Title
Advanced CF7 DB < 2.1.0 - Cross-Site Request Forgery to Form Entry Deletion
Slug
advanced-cf7-db
Published
2026-06-30
Title
Advanced Contact form 7 DB < 2.1.0 - Missing Authorization
Slug
advanced-classifieds-and-directory-pro
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
advanced-classifieds-and-directory-pro
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
advanced-classifieds-and-directory-pro
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-classifieds-and-directory-pro
Published
2024-03-19
Title
Advanced Classifieds & Directory Pro < 3.1.2 - Missing Authorization to Arbitrary Attachment Deletion
Slug
advanced-classifieds-and-directory-pro
Published
2024-07-04
Title
Advanced Classifieds & Directory Pro < 3.2.1 - Authenticated (Contributor+) Local File Inclusion
Slug
advanced-classifieds-and-directory-pro
Published
2025-12-24
Title
Advanced Classifieds & Directory Pro < 3.3.0 - Cross-Site Request Forgery