WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
amazonify
Published
2023-11-07
Title
Amazonify <= 0.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
amazonjs
Published
2023-01-20
Title
Amazon JS <= 0.10 - Contributor+ Stored XSS
Slug
amazonsimpleadmin
Published
2024-09-09
Title
Affiliate Super Assistent < 1.5.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
amberlink
Published
2025-01-14
Title
Amber <= 1.4.4 - Reflected Cross-Site Scripting
Slug
amcharts-charts-and-maps
Published
2022-08-09
Title
amCharts: Charts and Maps < 1.4.1 - Contributor+ Stored Cross-Site Scripting
Slug
amcharts-charts-and-maps
Published
2024-09-11
Title
amCharts: Charts and Maps < 1.4.5 - Reflected Cross-Site Scripting via Cross-Site Request Forgery
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Reflected Cross-Site Scripting
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Manager+ RCE
Slug
ameliabooking
Published
2022-03-02
Title
Amelia < 1.0.47 - Unauthenticated Stored XSS via lastName
Slug
ameliabooking
Published
2022-03-01
Title
Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure
Slug
ameliabooking
Published
2022-03-14
Title
Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure
Slug
ameliabooking
Published
2022-03-14
Title
Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update
Slug
ameliabooking
Published
2023-04-06
Title
Appointment and Event Booking Calendar for WordPress < 1.0.76 - Reflected XSS
Slug
ameliabooking
Published
2023-12-22
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.86 - Contributor+ Stored XSS
Slug
ameliabooking
Published
2024-01-18
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.94 - Contributor+ Stored Cross-Site Scripting via shortcode
Slug
ameliabooking
Published
2024-01-17
Title
Amelia < 1.0.99 - Missing Authorization
Slug
ameliabooking
Published
2024-02-29
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.99 - Reflected Cross-Site Scripting
Slug
ameliabooking
Published
2024-04-10
Title
Amelia < 1.0.96 - Cross-Site Request Forgery
Slug
ameliabooking
Published
2024-06-20
Title
Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
ameliabooking
Published
2024-08-07
Title
Booking for Appointments and Events Calendar – Amelia < 1.2.1 - Unauthenticated Full Path Disclosure
Slug
ameliabooking
Published
2024-09-04
Title
Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite < 1.2.5 - Missing Authorization to Sensitive Information Exposure
Slug
ameliabooking
Published
2025-02-23
Title
Amelia < 1.2.17 - Unauthenticated Insecure Direct Object Reference
Slug
ameliabooking
Published
2025-03-27
Title
Booking for Appointments and Events Calendar – Amelia < 1.2.20 - Unauthenticated Full Path Disclosure
Slug
ameliabooking
Published
2025-11-15
Title
Booking for Appointments and Events Calendar – Amelia < 1.2.36 - Unauthenticated SQL Injection via search