WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ap-custom-testimonial
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-custom-testimonial
Published
2022-01-25
Title
AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting
Slug
ap-custom-testimonial
Published
2022-01-25
Title
AP Custom Testimonial < 1.4.8 - Admin+ SQL Injection
Slug
ap-google-maps
Published
2025-03-24
Title
Arrow Maps <= 1.0.9 - Reflected Cross-Site Scripting
Slug
ap-honeypot
Published
2025-09-05
Title
AP HoneyPot WordPress Plugin <= 1.4 - Cross-Site Request Forgery
Slug
ap-mega-menu
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-mega-menu
Published
2022-02-28
Title
AP Mega Menu < 3.0.8 - Reflected Cross-Site Scripting
Slug
ap-plugin-scripteo
Published
2025-05-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager < 4.89 - Unauthenticated SQL Injection
Slug
ap-plugin-scripteo
Published
2025-05-16
Title
Ads Pro Plugin <= 4.88 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ap-plugin-scripteo
Published
2025-05-21
Title
Ads Pro Plugin <= 4.88 - Unauthenticated Local File Inclusion
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplate
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id'
Slug
ap-plugin-scripteo
Published
2025-11-23
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id
Slug
ap-plugin-scripteo
Published
2026-02-20
Title
Ads Pro < 5.1 - Missing Authorization
Slug
ap-pricing-tables-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-pricing-tables-lite
Published
2022-02-28
Title
AP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site Scripting
Slug
ap-pricing-tables-lite
Published
2023-05-10
Title
AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi
Slug
apa-banner-slider
Published
2024-10-17
Title
Apa Banner Slider <= 1.0.0 - Cross-Site Request Forgery to SLQ Injection
Slug
apa-register-newsletter-form
Published
2024-10-18
Title
APA Register Newsletter Form <= 1.0.0 - Cross-Site Request Forgery to SQL Injection
Slug
aparat
Published
2023-11-28
Title
Aparat <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
aparat-responsive
Published
2025-02-13
Title
Aparat Responsive <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting