WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
affiliatewp-external-referral-links
Published
2025-09-22
Title
AffiliateWP – External Referral Links < 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
affiliatex
Published
2024-10-21
Title
AffiliateX < 1.2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
affiliatex
Published
2026-01-06
Title
AffiliateX < 1.4.0 - Missing Authorization
Slug
affiliatex
Published
2026-01-15
Title
AffiliateX 1.0.0 - 1.3.9.3 - Authenticated (Subscriber+) Missing Authorization to Stored Cross-Site Scripting via save_customization_settings
Slug
affiliator-lite
Published
2024-10-17
Title
Affiliator <= 2.1.3 - Unauthenticated Arbitrary File Upload
Slug
affs
Published
2025-05-30
Title
SUMO Affiliates Pro < 11.1.0 - Unauthenticated Arbitrary File Upload
Slug
affs
Published
2025-11-04
Title
SUMO Affiliates Pro < 11.1.0 - Authenticated (Subscriber+) Information Exposure
Slug
affs
Published
2026-03-18
Title
SUMO Affiliates Pro < 11.4.0 - Unauthenticated PHP Object Injection
Slug
afiliados-de-amazon-lite
Published
2025-12-19
Title
Amazon affiliate lite Plugin <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
afiliados-de-amazon-lite
Published
2025-12-19
Title
Amazon affiliate lite Plugin <= 1.0.0 - Cross-Site Request Forgery to Plugin Settings Update
Slug
aforms-eats
Published
2025-02-11
Title
AForms Eats < 1.3.2 - Unauthenticated Full Path Disclosure
Slug
aforms-form-builder-for-price-calculator-cost-estimation
Published
2024-07-15
Title
AForms < 2.2.7 - Unauthenticated Full Path Disclosure
Slug
afterpay-gateway-for-woocommerce
Published
2021-08-16
Title
Afterpay Gateway for WooCommerce < 3.2.1 - Reflected Cross-Site Scripting
Slug
afterpay-gateway-for-woocommerce
Published
2022-12-01
Title
Afterpay Gateway for WooCommerce < 3.5.1 - Reflected Cross-Site Scripting
Slug
afterpay-gateway-for-woocommerce
Published
2022-12-01
Title
Afterpay Gateway for WooCommerce < 3.5.1 - Reflected Cross-Site Scripting
Slug
aftership-woocommerce-tracking
Published
2025-08-27
Title
AfterShip Tracking < 1.17.18 - Missing Authorization
Slug
ag-custom-admin
Published
2020-09-09
Title
Absolutely Glamorous Custom Admin < 6.5.5 - CSRF & XSS
Slug
ag-custom-admin
Published
2021-07-30
Title
Custom Dashboard & Login Page - AGCA < 6.9.2 - Admin+ Stored Cross-Site Scripting
Slug
ag-custom-admin
Published
2021-12-30
Title
Custom Dashboard & Login Page < 7.0 - Admin+ Stored Cross-Site Scripting
Slug
ag-custom-admin
Published
2024-04-04
Title
AGCA – Custom Dashboard & Login Page < 7.2.2 - Admin+ Stored XSS via Image URL
Slug
ag-custom-admin
Published
2024-04-24
Title
Absolutely Glamorous Custom Admin < 7.2.4 - Admin+ SSRF
Slug
age-gate
Published
2020-11-27
Title
Age Gate < 2.13.5 - Unauthenticated Open Redirect
Slug
age-gate
Published
2021-10-06
Title
Age Gate < 2.16.4 - Authenticated Stored Cross-Site Scripting
Slug
age-gate
Published
2021-10-25
Title
Age Gate < 2.17.1 - Unauthenticated Import Settings
Slug
age-gate
Published
2022-05-31
Title
Age Gate < 2.20.4 - Reflected Cross-Site Scripting