WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
amazon-product-price
Published
2024-12-11
Title
Amazon Product Price <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
amazon-scraper
Published
2026-05-19
Title
Amazon Scraper <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update
Slug
amazon-showcase-wordpress-widget
Published
2025-04-17
Title
Amazon Showcase WordPress Plugin <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
amazonify
Published
2023-11-07
Title
Amazonify <= 0.8.1 - Cross-Site Request Forgery to Amazon Tracking ID Update
Slug
amazonify
Published
2023-11-07
Title
Amazonify <= 0.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
amazonjs
Published
2023-01-20
Title
Amazon JS <= 0.10 - Contributor+ Stored XSS
Slug
amazonsimpleadmin
Published
2024-09-09
Title
Affiliate Super Assistent < 1.5.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
amazonsimpleadmin
Published
2026-05-30
Title
Affiliate Super Assistent < 1.10.2 - Unauthenticated Stored Cross-Site Scripting
Slug
amazonsimpleadmin
Published
2026-08-31
Title
Affiliate Super Assistent < 1.10.3 - Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function
Slug
amberlink
Published
2025-01-14
Title
Amber <= 1.4.4 - Reflected Cross-Site Scripting
Slug
amcharts-charts-and-maps
Published
2022-08-09
Title
amCharts: Charts and Maps < 1.4.1 - Contributor+ Stored Cross-Site Scripting
Slug
amcharts-charts-and-maps
Published
2024-09-11
Title
amCharts: Charts and Maps < 1.4.5 - Reflected Cross-Site Scripting via Cross-Site Request Forgery
Slug
amelia
Published
2026-09-01
Title
Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Reflected Cross-Site Scripting
Slug
ameliabooking
Published
2022-02-23
Title
Amelia < 1.0.46 - Manager+ RCE
Slug
ameliabooking
Published
2022-03-02
Title
Amelia < 1.0.47 - Unauthenticated Stored XSS via lastName
Slug
ameliabooking
Published
2022-03-01
Title
Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure
Slug
ameliabooking
Published
2022-03-14
Title
Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure
Slug
ameliabooking
Published
2022-03-14
Title
Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update
Slug
ameliabooking
Published
2023-04-06
Title
Appointment and Event Booking Calendar for WordPress < 1.0.76 - Reflected XSS
Slug
ameliabooking
Published
2023-12-22
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.86 - Contributor+ Stored XSS
Slug
ameliabooking
Published
2024-01-18
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.94 - Contributor+ Stored Cross-Site Scripting via shortcode
Slug
ameliabooking
Published
2024-01-17
Title
Amelia < 1.0.99 - Missing Authorization
Slug
ameliabooking
Published
2024-02-29
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.99 - Reflected Cross-Site Scripting