WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ajax-store-locator
Published
2015-04-15
Title
Ajax Store Locator <= 1.2 - Remote SQL Injection
Slug
ajax-woosearch
Published
2025-09-11
Title
Ajax WooSearch <= 1.0.0 - Unauthenticated SQL Injection
Slug
ajax-wp-query-search-filter
Published
2025-01-16
Title
Ajax WP Query Search Filter <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ajax_multi_upload
Published
2014-08-01
Title
Ajax Multi Upload 1.1 - Shell Upload
Slug
ajaxgallery
Published
2014-08-01
Title
Ajax Gallery <= 3.0 - SQL Injection
Slug
ajs-footnotes
Published
2026-01-13
Title
AJS Footnotes <= 1.0 - Unauthenticated Stored Cross-Site Scripting
Slug
ak-menu-icons-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
akismet
Published
2015-10-13
Title
Akismet 2.5.0-3.1.4 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
akismet-htaccess-writer
Published
2024-10-15
Title
Akismet htaccess writer <= 1.0.1 - Reflected Cross-Site Scripting
Slug
akismet-privacy-policies
Published
2022-03-07
Title
Akismet Privacy Policies <= 2.0.1- Reflected Cross-Site Scripting
Slug
aklamator-infeed
Published
2024-12-19
Title
aklamator-infeed <= 2.0.0 - Admin+ Stored XSS
Slug
aklamator-infeed
Published
2024-12-19
Title
aklamator-infeed <= 2.0.0 - Reflected XSS
Slug
alba-board
Published
2026-06-05
Title
Alba Board < 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'card_id' Parameter
Slug
albo-pretorio-on-line
Published
2015-07-02
Title
Albo Pretorio Online <= 3.2 - Multiple Vulnerabilities
Slug
albo-pretorio-on-line
Published
2023-04-03
Title
Albo Pretorio Online < 4.6.2 - Reflected XSS
Slug
albo-pretorio-on-line
Published
2023-03-27
Title
Albo Pretorio Online < 4.6.1 - Reflected XSS
Slug
albo-pretorio-on-line
Published
2023-05-03
Title
Albo Pretorio Online < 4.6.4 - Reflected XSS
Slug
albo-pretorio-on-line
Published
2024-01-17
Title
Albo Pretorio Online <= 4.6.6 - Unauthenticated Sensitive Information Disclosure
Slug
albo-pretorio-on-line
Published
2024-01-17
Title
Albo Pretorio Online < 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
album-and-image-gallery-plus-lightbox
Published
2024-06-05
Title
Album and Image Gallery plus Lightbox < 2.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
album-and-image-gallery-plus-lightbox
Published
2026-02-18
Title
Album and Image Gallery Plus Lightbox < 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode
Slug
album-and-image-gallery-plus-lightbox
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Slug
albumreviewer
Published
2025-02-02
Title
Album Reviewer <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting
Slug
alchemist-ajax-upload
Published
2026-01-23
Title
Alchemist Ajax Upload <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Media File Deletion
Slug
ald-login-page
Published
2025-04-09
Title
ALD Login Page < 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting