WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-iframe
Published
2022-02-02
Title
Advanced iFrame < 2022 - Reflected Cross-Site Scripting
Slug
advanced-iframe
Published
2023-11-09
Title
Advanced iFrame < 2023.9 - Contributor+ Stored XSS
Slug
advanced-iframe
Published
2024-01-31
Title
Advanced iFrame < 2024.0 - Contributor+ Stored XSS
Slug
advanced-iframe
Published
2024-02-28
Title
Advanced iFrame < 2024.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2024-04-11
Title
Advanced iFrame < 2024.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
advanced-iframe
Published
2024-05-22
Title
Advanced iFrame < 2024.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2025-03-25
Title
Advanced iFrame < 2025.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header
Slug
advanced-iframe
Published
2025-03-25
Title
Advanced iFrame < 2025.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2025-03-25
Title
Advanced iFrame < 2025.0 - Unauthenticated Settings Update
Slug
advanced-iframe
Published
2025-07-25
Title
Advanced iFrame < 2025.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2025-08-15
Title
Advanced iFrame < 2025.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2026-01-19
Title
Advanced iFrame < 2026.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-iframe
Published
2026-07-07
Title
Advanced iFrame < 2026.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attribute
Slug
advanced-image-sitemap
Published
2022-04-19
Title
Advanced Image Sitemap <= 1.2 - Reflected Cross-Site Scripting
Slug
advanced-import
Published
2022-11-14
Title
Advanced Import < 1.3.8 - Arbitrary Plugin Installation & Activation via CSRF
Slug
advanced-import
Published
2026-06-18
Title
Advanced Import: One-Click Demo Import for WordPress < 2.0.0 - Authenticated (Author+) Server-Side Request Forgery via 'demo_file' Parameter
Slug
advanced-ip-blocker
Published
2026-05-28
Title
Advanced IP Blocker < 8.10.8 - Unauthenticated Stored Cross-Site Scripting
Slug
advanced-lazy-load
Published
2025-04-24
Title
Advanced lazy load <= 1.6.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
advanced-local-pickup-for-woocommerce
Published
2023-10-21
Title
Advanced Local Pickup for WooCommerce < 1.6.0 - Authenticated (Administrator+) SQL Injection
Slug
advanced-local-pickup-for-woocommerce
Published
2024-04-05
Title
Advanced Local Pickup for WooCommerce < 1.6.3 - Missing Authorization
Slug
advanced-local-pickup-for-woocommerce
Published
2024-04-22
Title
Advanced Local Pickup for WooCommerce < 1.6.2 - Missing Authorization to Notice Dismissal
Slug
advanced-members
Published
2026-04-07
Title
Advanced Members for ACF < 1.2.6 - Authenticated (Subscriber+) Arbitrary File Deletion via Path Traversal
Slug
advanced-menu-widget
Published
2023-10-23
Title
Advanced Menu Widget <= 0.4.1 - Contributor+ Stored XSS via Shortcode
Slug
advanced-most-recent-posts-mod
Published
2024-04-25
Title
Advanced Most Recent Posts Mod <= 1.6.5.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
advanced-nocaptcha-recaptcha
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius