WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
app-template-blocks-for-wpbakery-page-builder
Published
2025-12-11
Title
App Landing Template Blocks for WPBakery Page Builder <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
appbanners
Published
2025-06-05
Title
AppBanners <= 1.5.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
append-content
Published
2025-04-01
Title
Append Content <= 2.1.1 - Cross-Site Request Forgery to Settings Update
Slug
append-extensions-on-pages
Published
2025-09-22
Title
Append extensions on Pages <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
append-link-on-copy
Published
2025-09-22
Title
Append Link on Copy <= 0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
appender
Published
2025-12-31
Title
Appender <= 1.1.1 - Missing Authorization
Slug
apperr
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
appexperts
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
appexperts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
appexperts
Published
2025-03-24
Title
AppExperts < 1.4.5 - Unauthenticated Sensitive Information Exposure
Slug
appexperts
Published
2025-10-09
Title
AppExperts <= 1.4.5 - Unauthenticated Sensitive Information Exposure
Slug
appexperts
Published
2026-01-22
Title
AppExperts <= 1.4.5 - Authenticated (Subscriber+) SQL Injection
Slug
appizy-app-embed
Published
2025-01-06
Title
App Embed < 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
applicantpro
Published
2025-01-16
Title
Isolved Talent Acquisition < 1.4.0 - Reflected Cross-Site Scripting
Slug
application-passwords
Published
2025-12-05
Title
Application Passwords <= 0.1.3 - Reflected Cross-Site Scripting via reject_url
Slug
apply-online
Published
2023-06-26
Title
ApplyOnline < 2.5.6 - Admin+ Stored XSS
Slug
apply-online
Published
2023-10-12
Title
ApplyOnline – Application Form Builder and Manager < 2.5.3 - Reflected XSS
Slug
apply-online
Published
2023-10-16
Title
ApplyOnline < 2.5.4 - Missing Authorization
Slug
apply-online
Published
2024-05-21
Title
ApplyOnline – Application Form Builder and Manager < 2.6.3 - Missing Authorization to Sensitive Information Exposure
Slug
apply-online
Published
2024-07-25
Title
ApplyOnline – Application Form Builder and Manager < 2.6.3 - Unauthenticated Application File Access
Slug
apply-online
Published
2025-01-15
Title
ApplyOnline – Application Form Builder and Manager < 2.6.7.2 - Missing Authorization
Slug
apply-with-linkedin-buttons
Published
2025-01-16
Title
Apply with LinkedIn buttons <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
apply-with-linkedin-buttons
Published
2025-01-16
Title
Apply with LinkedIn buttons <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
appmaker-woocommerce-mobile-app-manager
Published
2024-07-10
Title
Appmaker – Convert WooCommerce to Android & iOS Native Mobile Apps <= 1.36.12 - Reflected Cross-Site Scripting
Slug
appmaps
Published
2024-12-12
Title
AppMaps <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting