WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
appointment-hour-booking
Published
2022-10-30
Title
Appointment Hour Booking < 1.3.72 - Feedback Submission via CSRF
Slug
appointment-hour-booking
Published
2022-11-29
Title
Appointment Hour Booking < 1.3.73 - Unauthenticated iFrame Injection
Slug
appointment-hour-booking
Published
2022-11-29
Title
Appointment Hour Booking < 1.3.73 - CAPTCHA Bypass
Slug
appointment-hour-booking
Published
2022-11-29
Title
Appointment Hour Booking < 1.3.73 - CSV Injection
Slug
appointment-hour-booking
Published
2024-04-22
Title
Appointment Hour Booking < 1.4.57 - Captcha Bypass
Slug
appointment-hour-booking
Published
2026-01-27
Title
Appointment Hour Booking – Booking Calendar < 1.5.61 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration
Slug
appointments
Published
2017-10-02
Title
Appointments <= 2.2.1 - Unauthenticated PHP Object Injection
Slug
appointmind
Published
2024-11-01
Title
Appointmind < 4.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
appointmind
Published
2025-09-16
Title
Appointmind < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
appointy-appointment-scheduler
Published
2025-03-31
Title
Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change
Slug
apppresser
Published
2023-11-16
Title
AppPresser < 4.3.0 - Insecure Password Reset Mechanism
Slug
apppresser
Published
2024-04-05
Title
AppPresser < 4.3.1 - Cross-Site Request Forgery via toggle_logging_callback()
Slug
apppresser
Published
2024-04-10
Title
AppPresser < 4.3.1 - Cross-Site Request Forgery via force_logging_off()
Slug
apppresser
Published
2024-04-22
Title
AppPresser < 4.3.1 - Missing Authorization
Slug
apppresser
Published
2024-05-28
Title
AppPresser < 4.4.0 - Improper Missing Encryption Exception Handling to Authentication Bypass
Slug
apppresser
Published
2024-10-15
Title
AppPresser < 4.4.5 - Privilege Escalation and Account Takeover via Weak OTP
Slug
apppresser
Published
2024-11-25
Title
AppPresser < 4.4.7 - Unauthenticated Privilege Escalation via Password Reset
Slug
apppresser
Published
2025-03-12
Title
AppPresser – Mobile App Framework < 4.4.11 - Unauthenticated Stored Cross-Site Scripting
Slug
apppresser
Published
2025-10-29
Title
AppPresser – Mobile App Framework < 4.5.1 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure
Slug
appreview
Published
2025-03-20
Title
AppReview <= 0.2.9 - Reflected Cross-Site Scripting
Slug
appsero-helper
Published
2025-03-10
Title
Appsero Helper < 1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
appsero-helper
Published
2025-04-21
Title
Appsero Helper <= 1.3.4 - Authenticated (Subscriber+) SQL Injection
Slug
appsplate
Published
2024-12-11
Title
Appsplate <= 2.1.3 - Unauthenticated SQL Injection
Slug
appten-image-rotator
Published
2025-02-03
Title
Image Rotator <= 2.0 - Reflected Cross-Site Scripting
Slug
apptha-banner
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)