WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
all-in-one-seo-pack
Published
2025-11-26
Title
All In One SEO Pack < 4.8.7 - Subscriber+ Information Exposure
Slug
all-in-one-seo-pack
Published
2026-01-15
Title
All in One SEO < 4.9.3 - Contributor+ AI Access Token and Credit Disclosure
Slug
all-in-one-seo-pack
Published
2026-05-19
Title
All in One SEO < 4.9.7.1 - Contributor+ Sensitive Information Exposure via 'internalOptions' Localized Script Data
Slug
all-in-one-seo-pack
Published
2026-06-29
Title
All in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI Integration
Slug
all-in-one-seo-pack
Published
2026-09-01
Title
All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant Block
Slug
all-in-one-seo-pack
Published
2026-10-01
Title
All in One SEO < 5.0.2 - Reflected DOM-Based XSS via URL Pathname
Slug
all-in-one-seo-pack
Published
2026-10-02
Title
All in One SEO < 5.0.2.1 - Unauthenticated Arbitrary Shortcode Execution via Search Query
Slug
all-in-one-seo-pack
Published
2026-10-30
Title
All in One SEO < 5.0.4 - Unauthenticated Sensitive Information Disclosure via 's' Parameter
Slug
all-in-one-seo-pack-pro
Published
2022-10-27
Title
All in One SEO Pro < 4.2.6 - Admin+ SSRF
Slug
all-in-one-slider
Published
2024-10-17
Title
All in One Slider <= 1.1 - Reflected Cross-Site Scripting
Slug
all-in-one-thumbnailsBanner
Published
2025-09-26
Title
LambertGroup - AllInOne - Banner with Thumbnails <= 3.8 - Authenticated (Contributor+) SQL Injection
Slug
all-in-one-thumbnailsBanner
Published
2026-02-26
Title
LambertGroup - AllInOne - Banner with Thumbnails <= 3.8 - Reflected Cross-Site Scripting
Slug
all-in-one-video-downloader
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
all-in-one-video-downloader
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
all-in-one-video-gallery
Published
2021-11-15
Title
All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion
Slug
all-in-one-video-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
all-in-one-video-gallery
Published
2022-08-17
Title
All-in-One Video Gallery 2.5.8 - 2.6.0 - Unauthenticated Arbitrary File Download & SSRF
Slug
all-in-one-video-gallery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
all-in-one-video-gallery
Published
2024-04-05
Title
All-in-One Video Gallery < 3.6.0 - Missing Authorization
Slug
all-in-one-video-gallery
Published
2024-05-01
Title
All-in-One Video Gallery < 3.6.5 - Contributor+ Arbitrary File Upload via featured image
Slug
all-in-one-video-gallery
Published
2024-05-14
Title
All-in-One Video Gallery < 3.7.0 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode
Slug
all-in-one-video-gallery
Published
2024-07-23
Title
All-in-One Video Gallery < 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode
Slug
all-in-one-video-gallery
Published
2025-12-05
Title
All-in-One Video Gallery 4.5.4 - 4.5.7 – Authenticated (Author+) Arbitrary File Upload via Import ZIP
Slug
all-in-one-video-gallery
Published
2026-01-15
Title
All-in-One Video Gallery < 4.6.4 - Authenticated (Author+) Arbitrary File Upload via VTT Upload Bypass
Slug
all-in-one-video-gallery
Published
2026-01-22
Title
All-in-One Video Gallery < 4.7.1 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion