WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ag-custom-admin
Published
2021-12-30
Title
Custom Dashboard & Login Page < 7.0 - Admin+ Stored Cross-Site Scripting
Slug
ag-custom-admin
Published
2024-04-04
Title
AGCA – Custom Dashboard & Login Page < 7.2.2 - Admin+ Stored XSS via Image URL
Slug
ag-custom-admin
Published
2024-04-24
Title
Absolutely Glamorous Custom Admin < 7.2.4 - Admin+ SSRF
Slug
age-gate
Published
2020-11-27
Title
Age Gate < 2.13.5 - Unauthenticated Open Redirect
Slug
age-gate
Published
2021-10-06
Title
Age Gate < 2.16.4 - Authenticated Stored Cross-Site Scripting
Slug
age-gate
Published
2021-10-25
Title
Age Gate < 2.17.1 - Unauthenticated Import Settings
Slug
age-gate
Published
2022-05-31
Title
Age Gate < 2.20.4 - Reflected Cross-Site Scripting
Slug
age-gate
Published
2022-06-10
Title
Age Gate < 2.17.1 - Unauthenticated Stored Cross-Site Scripting
Slug
age-gate
Published
2025-03-19
Title
Age Gate < 3.5.4 - Unauthenticated Local PHP File Inclusion via 'lang'
Slug
age-gate
Published
2025-04-09
Title
Age Gate < 3.6.0 - Missing Authorization
Slug
age-restriction
Published
2025-07-10
Title
Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read/Write
Slug
age-restriction
Published
2025-08-26
Title
Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Download
Slug
age-restriction
Published
2025-10-21
Title
Age Restriction <= 3.0.2 - Subscriber+ Privilege Escalation
Slug
age-verification
Published
2014-08-01
Title
Age Verification <= 0.4 - Open Redirect
Slug
age-verification-screen-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
age-verification-screen-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
agecheckernet
Published
2025-01-18
Title
Age Verification for your checkout page. Verify your customer's identity <= 1.20.0 - Reflected Cross-Site Scripting
Slug
agency-toolkit
Published
2024-12-17
Title
Agency Toolkit < 1.0.24 - Unauthenticated Arbitrary Options Update
Slug
agency-toolkit
Published
2025-04-01
Title
Agency Toolkit < 1.0.25 - Missing Authorization
Slug
agendapress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
agendapress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
agendapress
Published
2024-11-08
Title
AgendaPress – Easily Publish Meeting Agendas and Programs on WordPress <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
agenteasy-properties
Published
2022-11-02
Title
AgentEasy Properties <= 1.0.4 - Admin+ Stored XSS
Slug
aggregator-advanced-settings
Published
2024-10-03
Title
Aggregator Advanced Settings <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
agile-store-locator
Published
2022-09-28
Title
Store Locator < 1.4.6 - Stored XSS via CSRF