WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
animation-addons-for-elementor
Published
2024-12-17
Title
Animation Addons for Elementor < 1.1.7 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template
Slug
animation-addons-for-elementor
Published
2025-12-15
Title
Animation Addons for Elementor < 2.4.6 - Authenticated (Contributor+) Arbitrary Content Deletion
Slug
animation-addons-for-elementor
Published
2026-03-01
Title
Animation Addons for Elementor <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
animation-addons-for-elementor
Published
2026-06-09
Title
Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates <= 2.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters
Slug
animation-addons-for-elementor
Published
2026-05-26
Title
Animation Addons for Elementor < 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Weather Widget
Slug
animation-addons-for-elementor
Published
2026-07-13
Title
Animation Addons for Elementor < 2.7.0 - Author+ Stored XSS via SVG Upload
Slug
animation-addons-for-elementor
Published
2026-05-26
Title
Animation Addons for Elementor < 2.6.4 - Contributor+ Stored Cross-Site Scripting
Slug
animation-addons-for-elementor
Published
2026-05-26
Title
Animation Addons for Elementor < 2.6.4 - Contributor+ Stored Cross-Site Scripting
Slug
animation-addons-for-elementor
Published
2026-08-17
Title
Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery
Slug
animation-addons-for-elementor-pro
Published
2025-03-03
Title
Animation Addons for Elementor Pro < 1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Slug
annasta-woocommerce-product-filters
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
annasta-woocommerce-product-filters
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
annie
Published
2025-01-16
Title
Annie <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
annie
Published
2025-01-16
Title
Annie <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
annonces
Published
2014-08-01
Title
Annonces 1.2.0.1 - admin/theme.php File Upload PHP Code Execution
Slug
announce-from-the-dashboard
Published
2023-02-13
Title
Announce from the Dashboard < 1.5.2 - Admin+ Stored XSS
Slug
announce-from-the-dashboard
Published
2024-04-03
Title
Announce from the Dashboard < 1.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
announcekit
Published
2024-04-29
Title
AnnounceKit <= 2.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
announcer
Published
2024-04-05
Title
Announcer – Notification & message bars < 6.0.1 - Missing Authorization
Slug
announces
Published
2014-08-01
Title
Annonces 1.2.0.1 - Shell Upload
Slug
annuncifunebri-onoranza
Published
2025-12-12
Title
AnnunciFunebri Impresa < 4.7.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Deletion
Slug
anomify
Published
2026-05-19
Title
Anomify AI <= 0.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'anomify_api_key' Parameter
Slug
anomify
Published
2026-05-19
Title
Anomify AI <= 0.3.6 - Cross-Site Request Forgery
Slug
anonform-embedded-secure-form
Published
2025-06-19
Title
ANON::form embedded secure form < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
anonymize-links
Published
2025-01-16
Title
Anonymize Links <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting