WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
accept-stripe-payments-using-contact-form-7
Published
2024-12-11
Title
Accept Stripe Payments Using Contact Form 7 < 2.6 - Unauthenticated Information Exposure
Slug
accept-stripe-payments-using-contact-form-7
Published
2025-06-27
Title
Accept Stripe Payments Using Contact Form 7 < 3.1 - Unauthenticated Information Exposure
Slug
accept-stripe-payments-using-contact-form-7
Published
2025-12-11
Title
Accept Stripe Payments Using Contact Form 7 < 3.2 - Reflected Cross-Site Scripting via failure_message
Slug
access-category-password
Published
2024-04-15
Title
Access Category Password <= 1.5.1 - Reflected Cross-Site Scripting
Slug
access-code-feeder
Published
2022-08-25
Title
Access Code Feeder <= 1.0.3 - CSRF
Slug
access-demo-importer
Published
2021-10-06
Title
Access Demo Importer < 1.0.7 - Subscriber+ Arbitrary File Upload
Slug
access-demo-importer
Published
2022-01-24
Title
Access Demo Importer < 1.0.8 - Arbitrary Plugin Activation via CSRF
Slug
access-demo-importer
Published
2022-01-24
Title
Access Demo Importer < 1.0.8 - Data Reset via CSRF
Slug
accessally
Published
2020-01-21
Title
AccessAlly < 3.3.2 - Unauthenticated Arbitrary PHP Code Execution
Slug
accessally
Published
2021-03-26
Title
AccessAlly < 3.5.7 - $_SERVER Superglobal Leakage
Slug
accessibe
Published
2025-02-23
Title
Web Accessibility By accessiBe < 2.6 - Reflected Cross-Site Scripting
Slug
accessibe
Published
2025-10-10
Title
Web Accessibility By accessiBe < 2.11 - Cross-Site Request Forgery
Slug
accessibe
Published
2025-10-27
Title
Web Accessibility By accessiBe < 2.11 - Missing Authorization
Slug
accessibe
Published
2026-02-18
Title
Web Accessibility by accessiBe < 2.12 - Unauthenticated Sensitive Information Exposure
Slug
accessibility
Published
2022-10-12
Title
Accessibility < 1.0.4 - Admin+ Stored XSS
Slug
accessibility
Published
2024-01-31
Title
Accessibility < 1.0.7 - Cross-Site Request Forgery
Slug
accessibility-by-audioeye
Published
2025-12-14
Title
Accessibility by AudioEye < 1.1.0 - Missing Authorization
Slug
accessibility-checker
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
accessibility-checker
Published
2025-08-22
Title
Accessibility Checker by Equalize Digital < 1.30.1 - Authenticated (Contributor+) Insecure Direct Object Reference
Slug
accessibility-checker
Published
2025-09-09
Title
Accessibility Checker by Equalize Digital < 1.31.1 - Missing Authorization
Slug
accessibility-checker
Published
2025-09-09
Title
Accessibility Checker by Equalize Digital < 1.31.1 - Missing Authorization
Slug
accessibility-checker
Published
2026-05-27
Title
Equalize Digital Accessibility Checker < 1.42.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Accessibility Issue Modification via edac_insert_ignore_data AJAX Action
Slug
accessibility-checker
Published
2026-06-17
Title
Equalize Digital Accessibility Checker < 1.43.0 - Missing Authorization to Authenticated (Author+) Arbitrary Accessibility Issue Modification via 'largeBatch' Parameter
Slug
accessibility-checker
Published
2026-07-22
Title
Equalize Digital Accessibility Checker < 1.47.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'html' Parameter
Slug
accessibility-help-button
Published
2023-06-02
Title
Call Now Accessibility Button < 1.2 - Admin+ Stored XSS