WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-form-integration
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-form-integration
Published
2023-12-21
Title
Advanced Form Integration < 1.76.0 - Authenticated(Administrator+) SQL Injection
Slug
advanced-form-integration
Published
2024-03-19
Title
Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms < 1.82.6 - SQL Injection to Reflected Cross-Site Scripting via integration_id
Slug
advanced-form-integration
Published
2024-08-16
Title
AFI – The Easiest Integration Plugin < 1.89.6 - Cross-Site Request Forgery
Slug
advanced-form-integration
Published
2024-11-12
Title
AFI – The Easiest Integration Plugin < 1.92.1 - Reflected Cross-Site Scripting
Slug
advanced-form-integration
Published
2025-01-03
Title
Advanced Form Integration < 1.97.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
advanced-form-integration
Published
2025-03-03
Title
AFI < 1.100.0 - Admin+ Stored XSS
Slug
advanced-form-integration
Published
2025-03-03
Title
AFI < 1.100.0 - Admin+ Stored XSS
Slug
advanced-form-integration
Published
2026-04-29
Title
AFI – The Easiest Integration Plugin < 1.127.0 - Missing Authorization
Slug
advanced-form-integration
Published
2026-06-10
Title
Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping
Slug
advanced-form-integration
Published
2026-07-27
Title
Advanced Form Integration < 2.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary MailUp OAuth Token Overwrite via auth_redirect() Function
Slug
advanced-forms
Published
2020-06-27
Title
Advanced Forms < 1.6.9 - Subscriber+ Arbitrary User Email Address Update via IDOR
Slug
advanced-forms
Published
2024-02-05
Title
Advanced Forms for ACF < 1.9.3.3 - Missing Authorization to Unauthenticated Form Settings Export
Slug
advanced-forms
Published
2026-07-07
Title
Advanced Forms for ACF < 1.9.3.8 - Missing Authorization
Slug
advanced-forms-pro
Published
2020-06-27
Title
Advanced Forms < 1.6.9 - Subscriber+ Arbitrary User Email Address Update via IDOR
Slug
advanced-free-flat-shipping-woocommerce
Published
2023-07-11
Title
Advanced Flat rate shipping Woocommerce < 1.6.4.6 - Cross-Site Request Forgery
Slug
advanced-google-recaptcha
Published
2024-12-23
Title
Advanced Google reCAPTCHA < 1.26 - Brute Force Protection IP Unblock
Slug
advanced-google-recaptcha
Published
2025-02-24
Title
Advanced Google reCaptcha < 1.28 - Built-in Math CAPTCHA Bypass
Slug
advanced-google-recaptcha
Published
2025-03-27
Title
Advanced Google reCAPTCHA < 1.30 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter
Slug
advanced-google-recaptcha
Published
2026-06-05
Title
WP Captcha PRO < 5.39 - Subscriber+ Authentication Bypass via Temporary Login Link
Slug
advanced-google-recaptcha
Published
2026-06-05
Title
WP Captcha PRO < 5.39 - Subscriber+ Arbitrary File Upload
Slug
advanced-google-universal-analytics
Published
2025-07-28
Title
Advanced Google Universal Analytics <= 1.0.3 - Missing Authorization
Slug
advanced-gutenberg
Published
2025-07-01
Title
Gutenberg Blocks < 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-gutenberg
Published
2025-07-28
Title
Gutenberg Blocks < 3.3.2 - Unauthenticated Local File Inclusion
Slug
advanced-gutenberg
Published
2025-10-24
Title
Gutenberg Blocks – PublishPress Blocks Controls, Visibility, Reusable Blocks < 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting