WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
aparat-shortcode
Published
2025-09-05
Title
Aparat Video Shortcode <= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Unauthenticated Arbitrary File Upload
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Unauthenticated Stored Cross-Site Scripting
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Authenticated (Subscriber+) SQL Injection
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Unauthenticated SQL Injection
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Authenticated (Subscriber+) Privilege Escalation
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Authenticated (Subscriber+) Arbitrary File Upload
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 - Unauthenticated Local File Inclusion
Slug
apex-notification-bar-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
apexchat
Published
2023-04-18
Title
ApexChat < 1.3.2 - Admin+ Stored XSS
Slug
aphorismus
Published
2024-12-12
Title
Aphorismus <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
api-bearer-auth
Published
2019-09-05
Title
API Bearer Auth < 20190908 - Unauthenticated Reflected XSS
Slug
api-bing-map-2018
Published
2023-10-12
Title
WP Bing Map Pro < 5.0 - CSRF
Slug
api-info-themes-plugins-wp-org
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
api-key-for-google-maps
Published
2022-06-08
Title
API KEY for Google Maps < 1.2.2 - Arbitrary API Key Update via CSRF
Slug
api2cart-bridge-connector
Published
2022-10-28
Title
Api2Cart Bridge Connector < 1.2.0 - Unauthenticated Arbitrary File Upload
Slug
api2cart-bridge-connector
Published
2022-10-28
Title
Api2Cart Bridge Connector < 1.2.0 - Unauthenticated RCE
Slug
apimo
Published
2025-03-31
Title
Apimo Connector <= 2.6.5 - Settings Update via CSRF
Slug
apimo
Published
2026-01-03
Title
Apimo Connector <= 2.6.4 - Missing Authorization
Slug
apk-downloader
Published
2024-11-01
Title
APK Downloader <= 1.0.0 - Cross-Site Request Forgery to Stored Cross Site Scripting
Slug
aplazo-payment-gateway
Published
2026-01-13
Title
Aplazo Payment Gateway < 1.5.0 - Missing Authorization to Unauthenticated Order Status Manipulation
Slug
apocalypse-meow
Published
2017-12-03
Title
Apocalypse Meow 21.1.3-21.2.7 - BCrypt Authentication Bypass
Slug
apocalypse-meow
Published
2026-03-04
Title
Apocalypse Meow < 23.0.0 - Authenticated (Administrator+) SQL Injection via 'type' Parameter
Slug
apollo13-framework-extensions
Published
2023-11-03
Title
Apollo13 Framework Extensions < 1.9.1 - Contributor+ Stored XSS
Slug
apollo13-framework-extensions
Published
2023-02-24
Title
Apollo13 Framework Extensions < 1.9.0 - Missing Authorization