WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
animated-text-block
Published
2025-02-24
Title
Animated Text Block < 1.0.8 - Missing Authorization
Slug
animated-typed-js-shortcode
Published
2024-07-10
Title
Animated Typed JS Shortcode < 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
animated-typing-effect
Published
2023-08-17
Title
93digital Typing Effect < 1.3.7 - Contributor+ Stored XSS
Slug
animategl
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
animategl
Published
2025-01-31
Title
AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations <= 1.4.23 - Missing Authorization to Unauthenticated Settings Update
Slug
animation-addons-for-elementor
Published
2024-12-17
Title
Animation Addons for Elementor < 1.1.7 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template
Slug
animation-addons-for-elementor
Published
2025-12-15
Title
Animation Addons for Elementor < 2.4.6 - Authenticated (Contributor+) Arbitrary Content Deletion
Slug
animation-addons-for-elementor-pro
Published
2025-03-03
Title
Animation Addons for Elementor Pro < 1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Slug
annasta-woocommerce-product-filters
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
annasta-woocommerce-product-filters
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
annie
Published
2025-01-16
Title
Annie <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
annie
Published
2025-01-16
Title
Annie <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
annonces
Published
2014-08-01
Title
Annonces 1.2.0.1 - admin/theme.php File Upload PHP Code Execution
Slug
announce-from-the-dashboard
Published
2023-02-13
Title
Announce from the Dashboard < 1.5.2 - Admin+ Stored XSS
Slug
announce-from-the-dashboard
Published
2024-04-03
Title
Announce from the Dashboard < 1.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
announcekit
Published
2024-04-29
Title
AnnounceKit <= 2.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
announcer
Published
2024-04-05
Title
Announcer – Notification & message bars < 6.0.1 - Missing Authorization
Slug
announces
Published
2014-08-01
Title
Annonces 1.2.0.1 - Shell Upload
Slug
annuncifunebri-onoranza
Published
2025-12-12
Title
AnnunciFunebri Impresa <= 4.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Deletion
Slug
anonform-embedded-secure-form
Published
2025-06-19
Title
ANON::form embedded secure form < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
anonymize-links
Published
2025-01-16
Title
Anonymize Links <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
anonymous-restricted-content
Published
2024-02-02
Title
Anonymous Restricted Content < 1.6.3 - Protection Mechanism Bypass
Slug
anonymous-restricted-content
Published
2024-11-20
Title
Anonymous Restricted Content < 1.6.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
another-events-calendar
Published
2025-03-11
Title
Another Events Calendar <= 1.7.0 - Reflected Cross-Site Scripting
Slug
another-wordpress-classifieds-plugin
Published
2012-04-03
Title
Another WordPress Classifieds < 2.0 - Unspecified Image Upload