WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
absolute-reviews
Published
2024-09-26
Title
Absolute Reviews < 1.1.4 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Criteria Name
Slug
abstract-submission
Published
2020-03-24
Title
Multiple plugins - Unauthenticated Dompdf Local File Inclusion (LFI)
Slug
abtest
Published
2014-08-01
Title
ABtest - Directory Traversal
Slug
abtest
Published
2016-03-21
Title
ABtest - File Inclusion
Slug
abundatrade-plugin
Published
2025-05-02
Title
Abundatrade Plugin <= 1.8.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
abwp-simple-counter
Published
2023-12-19
Title
Simple Counter <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
academist-membership
Published
2025-02-28
Title
Academist Membership < 1.2 - Authentication Bypass
Slug
academy
Published
2024-02-21
Title
Academy LMS – eLearning and online course solution for WordPress < 1.9.20 - Authenticated (Subscriber+) Privilege Escalation
Slug
academy
Published
2024-04-22
Title
Academy LMS < 1.9.17 - Missing Authorization
Slug
academy
Published
2024-04-29
Title
Academy LMS < 1.9.17 - Missing Authorization
Slug
academy
Published
2024-05-10
Title
Academy LMS < 1.9.26 - Unauthenticated Sensitive Information Exposure
Slug
academy
Published
2024-06-21
Title
Academy LMS < 2.0.11 - Open Redirect
Slug
academy
Published
2024-07-11
Title
Academy LMS < 2.0.5 - Missing Authorization
Slug
academy
Published
2025-09-22
Title
Academy LMS < 3.3.5 - Authenticated (Academy Instructor+) Insecure Direct Object Reference
Slug
academy
Published
2025-11-07
Title
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution < 3.3.9 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses'
Slug
academy
Published
2025-12-30
Title
Academy LMS < 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
academy
Published
2026-01-20
Title
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution < 3.5.1 - Unauthenticated Privilege Escalation via Account Takeover
Slug
academy-pro
Published
2025-10-21
Title
Academy LMS Pro < 3.3.8 - Unauthenticated Privilege Escalation via Social Login Addon
Slug
academy-pro
Published
2025-11-07
Title
Academy LMS Pro < 3.3.9 - Unauthenticated Sensitive Information Exposure via 'enqueue_social_login_script'
Slug
accelerated-mobile-pages
Published
2018-10-20
Title
Accelerated Mobile Pages <= 0.9.97.19 - Multiple Unauthenticated Vulnerabilities
Slug
accelerated-mobile-pages
Published
2018-11-20
Title
Accelerated Mobile Pages < 0.9.97.21 - Stored XSS
Slug
accelerated-mobile-pages
Published
2021-12-11
Title
AMP for WP < 1.0.77.32 - Admin+ Stored Cross-Site Scripting
Slug
accelerated-mobile-pages
Published
2021-12-15
Title
AMP for WP < 1.0.77.33 - Admin+ Stored Cross-Site Scripting
Slug
accelerated-mobile-pages
Published
2023-11-28
Title
Accelerated Mobile Pages < 1.0.89 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
accelerated-mobile-pages
Published
2023-12-18
Title
AMP for WP – Accelerated Mobile Pages < 1.0.92.1 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode