WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ajar-productions-in5-embed
Published
2024-10-25
Title
Ajar in5 Embed < 3.1.4 - Unauthenticated Arbitrary File Upload
Slug
ajar-productions-in5-embed
Published
2025-05-09
Title
Ajar in5 Embed <= 3.1.5 - Unauthenticated Arbitrary File Upload
Slug
ajax-add-to-cart-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ajax-add-to-cart-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ajax-archive-calendar
Published
2023-10-24
Title
Ajax Archive Calendar < 2.6.8 - Contributor+ Stored XSS
Slug
ajax-awesome-css
Published
2024-10-14
Title
Ajax Custom CSS/JS <= 2.0.4 - Reflected Cross-Site Scripting
Slug
ajax-bootmodal-login
Published
2018-08-26
Title
Ajax BootModal Login <= 1.4.3 - Captcha Reuse
Slug
ajax-category-dropdown
Published
2014-08-01
Title
Ajax Category Dropdown 0.1.5 - Multiple Vulnerabilities
Slug
ajax-comment-form-cst
Published
2025-04-24
Title
Ajax Comment Form CST <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ajax-content-filter
Published
2024-11-04
Title
Ajax Content Filter <= 1.0 - Reflected Cross-Site Scripting
Slug
ajax-domain-checker
Published
2023-11-15
Title
Ajax Domain Checker <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ajax-extend
Published
2024-10-14
Title
ajax-extend <= 1.0 - Unauthenticated Remote Code Execution
Slug
ajax-filter-posts
Published
2024-05-03
Title
Post Grid Master < 3.4.8 - Missing Authorization
Slug
ajax-filter-posts
Published
2024-05-06
Title
Post Grid Master < 3.4.12 - Contributor+ Stored XSS
Slug
ajax-filter-posts
Published
2024-08-07
Title
Post Grid Master < 3.4.11 - Reflected Cross-Site Scripting
Slug
ajax-filter-posts
Published
2025-01-08
Title
Post Grid Master < 3.4.13 - Missing Authorization to Unauthenticated Local PHP File Inclusion
Slug
ajax-filter-posts
Published
2025-01-24
Title
Post Grid Master < 3.4.13 - Authenticated (Contributor+) Local File Inclusion
Slug
ajax-filter-posts
Published
2025-06-05
Title
Post Grid Master <= 3.4.14 - Missing Authorization
Slug
ajax-filter-posts
Published
2025-07-23
Title
Post Grid Master < 3.4.14 - Reflected Cross-Site Scripting via argsArray['read_more_text']
Slug
ajax-hits-counter
Published
2026-01-18
Title
AJAX Hits Counter + Popular Posts Widget <= 0.10.210305 - Missing Authorization
Slug
ajax-live-search
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ajax-live-search
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ajax-load-more
Published
2015-10-10
Title
Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & Deletion
Slug
ajax-load-more
Published
2016-08-15
Title
Ajax Load More <= 2.11.1 - Local File Inclusion (LFI)
Slug
ajax-load-more
Published
2020-05-18
Title
Ajax Load More < 5.3.2 - Authenticated SQL Injection