WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
alike
Published
2025-07-17
Title
Alike - WordPress Custom Post Comparison <= 3.0.1 - Reflected Cross-Site Scripting
Slug
alink-tap
Published
2025-05-02
Title
Alink Tap <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
alipay
Published
2014-05-28
Title
Alipay < 3.7.0 'inc.tenpay_notify.php' Cross-Site Scripting (XSS)
Slug
alipay
Published
2021-07-23
Title
Alipay <= 3.7.2 - Authenticated SQL Injection
Slug
alkubot
Published
2021-06-30
Title
Alkubot < 3.0.0 - Unauthorised AJAX call via CSRF
Slug
all-404-pages-redirect-to-homepage
Published
2024-02-08
Title
All 404 Pages Redirect to Homepage < 2.0 - Unauthenticated Stored Cross-Site Scripting
Slug
all-404-redirect-to-homepage
Published
2021-04-16
Title
All 404 Redirect to Homepage < 1.21 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
all-404-redirect-to-homepage
Published
2021-06-01
Title
All 404 Redirect to Homepage < 2.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
all-bootstrap-blocks
Published
2023-06-13
Title
All Bootstrap Blocks < 1.3.7 - Cross-Site Request Forgery
Slug
all-bootstrap-blocks
Published
2024-05-10
Title
All Bootstrap Blocks < 1.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
all-bootstrap-blocks
Published
2024-08-16
Title
All Bootstrap Blocks < 1.3.20 - Contributor+ Stored XSS
Slug
all-bootstrap-blocks
Published
2024-12-02
Title
All Bootstrap Blocks < 1.3.20 - Authenticated (Contributor+) Local File Inclusion
Slug
all-bootstrap-blocks
Published
2025-01-29
Title
All Bootstrap Blocks < 1.3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
all-bootstrap-blocks
Published
2025-08-26
Title
All Bootstrap Blocks < 1.3.29 - Missing Authorization
Slug
all-contact-form-integration-for-elementor
Published
2024-04-16
Title
EleForms – All In One Form Integration including DB for Elementor < 2.9.9.8 - Missing Authorization to Sensitive Information Exposure
Slug
all-contact-form-integration-for-elementor
Published
2024-04-16
Title
EleForms – All In One Form Integration including DB for Elementor < 2.9.9.8 - Unauthenticated Stored Cross-Site Scripting
Slug
all-contact-form-integration-for-elementor
Published
2024-07-11
Title
EleForms <= 2.9.9.9 - Missing Authorization
Slug
all-contact-form-integration-for-elementor
Published
2024-11-05
Title
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing Authorization
Slug
all-contact-form-integration-for-elementor
Published
2024-11-15
Title
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Cross-Site Request Forgery
Slug
all-custom-fields-groups
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
all-embed-addons-for-elementor
Published
2025-01-24
Title
All Embed – Elementor Addons < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
all-images-ai
Published
2025-02-11
Title
All-Images.ai – IA Image Bank and Custom Image creation < 1.0.5 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
all-in-menu
Published
2025-02-21
Title
All In Menu <= 1.1.5 - Authenticated (Subscriber+) SQL Injection
Slug
all-in-one-accessibility
Published
2025-12-31
Title
All in One Accessibility < 1.16 - Missing Authorization
Slug
all-in-one-adsense-and-ypn
Published
2014-08-01
Title
All in One Adsense YPN 2.0.1 - all-in-one-adsense-&-ypn.php Unspecified XSS