WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
advanced-typekit
Published
2025-04-02
Title
Advanced Typekit <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
advanced-uploader
Published
2022-04-19
Title
Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload
Slug
advanced-usps-shipping-method
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-video-player-with-analytics
Published
2024-11-08
Title
Advanced Video Player with Analytics <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-visual-elements
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-what-should-we-write-about-next
Published
2024-11-28
Title
Advanced What should we write next about <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
advanced-what-should-we-write-about-next
Published
2024-12-14
Title
Advanced What should we write next about <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
Slug
advanced-woo-labels
Published
2024-06-05
Title
Advanced Woo Labels – Product Labels for WooCommerce < 1.94 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-woo-labels
Published
2024-09-30
Title
Advanced Woo Labels < 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
advanced-woo-labels
Published
2025-04-04
Title
Advanced Woo Labels < 2.16 - Contributor+ Stored XSS
Slug
advanced-woo-labels
Published
2026-02-24
Title
Advanced Woo Labels < 2.37 - Authenticated (Contributor+) Remote Code Execution via 'callback' Parameter
Slug
advanced-woo-labels
Published
2026-02-25
Title
Advanced Woo Labels < 2.37 - Authenticated (Admin+) Remote Code Execution
Slug
advanced-woo-labels
Published
2026-07-31
Title
Advanced Woo Labels < 2.49 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_color' Parameter
Slug
advanced-woo-search
Published
2019-05-02
Title
Advanced Woo Search < 1.70 - CSRF & XSS
Slug
advanced-woo-search
Published
2020-04-22
Title
Advanced Woo Search < 2.00 - SQL query leak in ajax search
Slug
advanced-woo-search
Published
2023-05-01
Title
Advanced Woo Search < 2.78 - Admin+ Stored Cross-Site Scripting
Slug
advanced-woo-search
Published
2024-01-12
Title
Advanced Woo Search < 2.97 - Reflected Cross-Site Scripting
Slug
advanced-woo-search
Published
2025-03-25
Title
Advanced Woo Search < 3.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via aws_search_terms Shortcode
Slug
advanced-wp-columns
Published
2022-11-10
Title
Advanced WP Columns <= 2.0.6 - Admin+ Stored Cross-Site Scripting
Slug
advanced-wp-reset
Published
2022-07-05
Title
Advanced WordPress Reset < 1.6 - Reflected Cross-Site Scripting
Slug
advanced-wp-table
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
advanced-wp-table
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
advanced-xml-reader
Published
2014-08-01
Title
Advanced XML Reader 0.3.4 - XML External Entity (XXE) Injection
Slug
advanced-xml-reader
Published
2014-08-01
Title
Advanced XML Reader 0.1.1 - XML External Entity (XXE) Data Parsing Arbitrary File Disclosure
Slug
advanced-youtube-channel-pagination
Published
2023-04-24
Title
Advanced Youtube Channel Pagination <= 1.0 - Reflected XSS