WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
applicantpro
Published
2025-01-16
Title
Isolved Talent Acquisition < 1.4.0 - Reflected Cross-Site Scripting
Slug
application-passwords
Published
2025-12-05
Title
Application Passwords <= 0.1.3 - Reflected Cross-Site Scripting via reject_url
Slug
apply-online
Published
2023-06-26
Title
ApplyOnline < 2.5.6 - Admin+ Stored XSS
Slug
apply-online
Published
2023-10-12
Title
ApplyOnline – Application Form Builder and Manager < 2.5.3 - Reflected XSS
Slug
apply-online
Published
2023-10-16
Title
ApplyOnline < 2.5.4 - Missing Authorization
Slug
apply-online
Published
2024-05-21
Title
ApplyOnline – Application Form Builder and Manager < 2.6.3 - Missing Authorization to Sensitive Information Exposure
Slug
apply-online
Published
2024-07-25
Title
ApplyOnline – Application Form Builder and Manager < 2.6.3 - Unauthenticated Application File Access
Slug
apply-online
Published
2025-01-15
Title
ApplyOnline – Application Form Builder and Manager < 2.6.7.2 - Missing Authorization
Slug
apply-with-linkedin-buttons
Published
2025-01-16
Title
Apply with LinkedIn buttons <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
apply-with-linkedin-buttons
Published
2025-01-16
Title
Apply with LinkedIn buttons <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
appmaker-woocommerce-mobile-app-manager
Published
2024-07-10
Title
Appmaker – Convert WooCommerce to Android & iOS Native Mobile Apps <= 1.36.12 - Reflected Cross-Site Scripting
Slug
appmaps
Published
2024-12-12
Title
AppMaps <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
appmysite
Published
2023-12-04
Title
AppMySite < 3.11.1 - Unauthenticated Information Disclsoure
Slug
appmysite
Published
2025-09-22
Title
AppMySite < 3.15.1 - Missing Authorization
Slug
appointify
Published
2025-03-31
Title
Appointify <= 1.0.8 - Authenticated (Admin+) Arbitrary File Upload
Slug
appointify
Published
2025-12-30
Title
Appointify <= 1.0.8 - Authenticated (Administrator+) SQL Injection
Slug
appointify
Published
2025-12-31
Title
Appointify <= 1.0.8 - Cross-Site Request Forgery
Slug
appointment-booking-calendar
Published
2015-09-26
Title
Appointment Booking Calendar < 1.1.8 - Multiple Reflected Cross-Site Scripting (XSS) and SQL Injection
Slug
appointment-booking-calendar
Published
2016-01-25
Title
Appointment Booking Calendar < 1.1.24 - Unauthenticated SQL Injection
Slug
appointment-booking-calendar
Published
2016-01-27
Title
Appointment Booking Calendar < 1.1.25 - Unauthenticated SQL Injection
Slug
appointment-booking-calendar
Published
2019-07-04
Title
Appointment Booking Calendar < 1.3.19 - Unauthenticated Stored XSS
Slug
appointment-booking-calendar
Published
2020-03-04
Title
Appointment Booking Calendar < 1.3.35 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
appointment-booking-calendar
Published
2020-03-04
Title
Appointment Booking Calendar < 1.3.35 - CSV Injection
Slug
appointment-booking-calendar
Published
2022-10-30
Title
Appointment Booking Calendar < 1.3.70 - Feedback Submission via CSRF
Slug
appointment-booking-calendar
Published
2024-02-28
Title
Booking Calendar < 1.3.83 - CSRF appointment scheduling