WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
amazon-auto-links
Published
2023-12-29
Title
Auto Amazon Links < 5.1.2 - Contributor+ Stored XSS
Slug
amazon-auto-links
Published
2024-10-03
Title
Auto Amazon Links – Amazon Associates Affiliate Plugin < 5.4.3 - Reflected Cross-Site Scripting
Slug
amazon-auto-links
Published
2025-11-10
Title
Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.3 - Unauthenticated Arbitrary File Read
Slug
amazon-einzeltitellinks
Published
2022-05-30
Title
Amazon Einzeltitellinks <= 1.3.3 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
amazon-link
Published
2022-05-09
Title
Amazon Link <= 3.2.10 - Admin+ Stored Cross-Site Scripting
Slug
amazon-product-in-a-post-plugin
Published
2015-05-07
Title
Amazon Product In a Post Plugin < 3.5.3 - Unauthenticated SQL Injection
Slug
amazon-product-in-a-post-plugin
Published
2025-05-07
Title
Amazon Product in a Post <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
amazon-product-price
Published
2024-12-11
Title
Amazon Product Price <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
amazon-scraper
Published
2026-05-19
Title
Amazon Scraper <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update
Slug
amazon-showcase-wordpress-widget
Published
2025-04-17
Title
Amazon Showcase WordPress Plugin <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
amazonify
Published
2023-11-07
Title
Amazonify <= 0.8.1 - Cross-Site Request Forgery to Amazon Tracking ID Update
Slug
amazonify
Published
2023-11-07
Title
Amazonify <= 0.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
amazonjs
Published
2023-01-20
Title
Amazon JS <= 0.10 - Contributor+ Stored XSS
Slug
amazonsimpleadmin
Published
2024-09-09
Title
Affiliate Super Assistent < 1.5.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
amazonsimpleadmin
Published
2026-05-30
Title
Affiliate Super Assistent < 1.10.2 - Unauthenticated Stored Cross-Site Scripting
Slug
amazonsimpleadmin
Published
2026-08-31
Title
Affiliate Super Assistent < 1.10.3 - Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function
Slug
amberlink
Published
2025-01-14
Title
Amber <= 1.4.4 - Reflected Cross-Site Scripting
Slug
amcharts-charts-and-maps
Published
2022-08-09
Title
amCharts: Charts and Maps < 1.4.1 - Contributor+ Stored Cross-Site Scripting
Slug
amcharts-charts-and-maps
Published
2024-09-11
Title
amCharts: Charts and Maps < 1.4.5 - Reflected Cross-Site Scripting via Cross-Site Request Forgery
Slug
amelia
Published
2026-09-01
Title
Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Reflected Cross-Site Scripting
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Manager+ RCE
Slug
ameliabooking
Published
2022-03-02
Title
Amelia < 1.0.47 - Unauthenticated Stored XSS via lastName
Slug
ameliabooking
Published
2022-03-01
Title
Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure