WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
arforms-form-builder
Published
2022-11-23
Title
ARForms Form Builder < 1.5.7 - Unauthenticated Stored XSS
Slug
arforms-form-builder
Published
2024-01-03
Title
ARForms < 1.5.9 - Unauthenticated Stored XSS
Slug
arforms-form-builder
Published
2024-04-05
Title
ARForms Form Builder < 1.6.2 - Cross-Site Request Forgery
Slug
arforms-form-builder
Published
2024-04-05
Title
ARForms Form Builder < 1.6.2 - Missing Authorization
Slug
arforms-form-builder
Published
2024-04-25
Title
ARForms Form Builder < 1.6.5 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion
Slug
arforms-form-builder
Published
2024-07-09
Title
ARForms Form Builder < 1.6.8 - Reflected Cross-Site Scripting
Slug
arforms-form-builder
Published
2024-12-05
Title
ARForms Form Builder < 1.7.2 - HTML Injection
Slug
arforms-form-builder
Published
2024-09-23
Title
ARForms Builder < 1.7.1 - Unauthenticated Stored XSS
Slug
ari-cf7-connector
Published
2024-01-09
Title
Contact Form 7 Connector < 1.2.3 - Reflected XSS
Slug
ari-cf7-connector
Published
2024-02-05
Title
Contact Form 7 Connector < 1.2.3 - Cross-Site Request Forgery
Slug
ari-fancy-lightbox
Published
2022-02-17
Title
ARI Fancy Lightbox < 1.3.9 - Reflected Cross-Site Scripting
Slug
ari-fancy-lightbox
Published
2024-09-25
Title
ARI Fancy Lightbox < 1.3.18 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
ari-fancy-lightbox
Published
2025-09-05
Title
ARI Fancy Lightbox < 1.4.1 - Contributor+ Stored XSS
Slug
ari-stream-quiz
Published
2023-11-16
Title
ARI Stream Quiz < 1.3.0 - Contributor+ Stored XSS
Slug
ari-stream-quiz
Published
2023-11-07
Title
ARI Stream Quiz < 1.3.3 - Contributor+ Content Injection
Slug
ari-stream-quiz
Published
2023-12-29
Title
ARI Stream Quiz < 1.3.1 - Authenticated (Contributor+) PHP Object Injection
Slug
ari-stream-quiz
Published
2023-12-27
Title
ARI Stream Quiz < 1.3.0 - Cross-Site Request Forgery
Slug
ari-stream-quiz
Published
2023-11-21
Title
ARI Stream Quiz < 1.3.0 - Cross-Site Request Forgery
Slug
aria-font
Published
2025-04-09
Title
Aria Font <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
arielbrailovsky-viralad
Published
2025-03-12
Title
Arielbrailovsky-Viralad <= 1.0.8 - Unauthenticated SQL Injection
Slug
arielbrailovsky-viralad
Published
2025-03-12
Title
Arielbrailovsky-Viralad <= 1.0.8 - Unauthenticated SQL Injection
Slug
ark-core
Published
2025-02-24
Title
Ark Theme Core < 1.71.0 - Unauthenticated Remote Code Execution
Slug
ark-relatedpost
Published
2025-12-04
Title
ARK Related Posts < 2.20 - Cross-Site Request Forgery to Settings Update
Slug
ark-wysiwyg-comment-editor
Published
2021-09-23
Title
Ark Comment Editor <= 2.15.6 - Iframe Injection via Comment
Slug
arkhe-blocks
Published
2024-07-10
Title
Arkhe Blocks < 2.23.0 - Contributor+ Stored XSS