WordPress Plugin Vulnerabilities | Page 56 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

all-in-one-wp-security-and-firewall

Published

2019-10-08

Title

All In One WP Security & Firewall <= 4.4.1 - Open Redirect & Hidden Login Page Exposure

Slug

all-in-one-wp-security-and-firewall

Published

2020-09-09

Title

All In One WP Security & Firewall < 4.4.4 - CSRF & XSS

Slug

all-in-one-wp-security-and-firewall

Published

2021-02-10

Title

All In One WP Security & Firewall < 4.4.6 - Authenticated Cross-Site Scripting (XSS)

Slug

all-in-one-wp-security-and-firewall

Published

2022-04-11

Title

All In One WP Security < 4.4.11 - Authenticated Arbitrary Redirect / Reflected XSS

Slug

all-in-one-wp-security-and-firewall

Published

2022-11-21

Title

All In One WP Security & Firewall < 5.0.8 - IP Spoofing

Slug

all-in-one-wp-security-and-firewall

Published

2022-11-22

Title

All-In-One Security < 5.1.1 - Bulk Actions via CSRF

Slug

all-in-one-wp-security-and-firewall

Published

2022-12-27

Title

All In One WP Security & Firewall < 5.1.3 - Configuration Leak

Slug

all-in-one-wp-security-and-firewall

Published

2023-03-20

Title

All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal

Slug

all-in-one-wp-security-and-firewall

Published

2023-03-20

Title

All-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSS

Slug

all-in-one-wp-security-and-firewall

Published

2023-07-14

Title

All-In-One Security (AIOS) – Security and Firewall < 5.2.0 - Insecure Storage of Password

Slug

all-in-one-wp-security-and-firewall

Published

2023-10-25

Title

All In One WP Security < 5.2.5 - Protection Bypass of Renamed Login Page via URL Encoding

Slug

all-in-one-wp-security-and-firewall

Published

2024-02-06

Title

All-In-One Security (AIOS) – Security and Firewall < 5.2.6 - Reflected Cross-Site Scripting

Slug

all-in-one-wp-security-and-firewall

Published

2024-02-08

Title

All In One WP Security < 5.2.7 - Cross-Site Request Forgery to IP Blocking

Slug

all-push-notification

Published

2025-02-03

Title

All push notification for WP <= 1.5.3 - Unauthenticated Stored Cross-Site Scripting

Slug

all-push-notification

Published

2025-04-09

Title

All push notification for WP <= 1.5.3 - Cross-Site Request Forgery to SQL Injection

Slug

all-push-notification

Published

2025-04-14

Title

All push notification for WP <= 1.5.3 - Reflected Cross-Site Scripting

Slug

all-social-share-options

Published

2025-09-29

Title

All Social Share Options <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

all-users-messenger

Published

2023-08-07

Title

All Users Messenger <= 1.24 - Subscriber+ Message Deletion via IDOR

Slug

all-video-gallery

Published

2014-08-01

Title

All Video Gallery - Multiple SQL Injection Vulnerabilities

Slug

all-video-gallery

Published

2014-09-18

Title

All Video Gallery 1.1 - config.php Multiple Parameter SQL Injection

Slug

all-video-gallery

Published

2014-09-24

Title

All Video Gallery 1.2 - SQL Injection

Slug

all_in_one_carousel

Published

2014-08-01

Title

all_in_one_carousel 1.2.20 - /tpl/add_carousel.php id Parameter Reflected XSS

Slug

Published

2024-12-03

Title

Accessibility by AllAccessible < 1.3.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update

Slug

Published

2025-01-03

Title

Accessibility by AllAccessible < 1.3.5 - Subscriber+ Privilege Escalation

Slug

allada-tshirt-designer-for-woocommerce

Published

2025-01-03

Title

Allada T-shirt Designer for Woocommerce <= 1.1 - Missing Authorization