WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
accordions
Published
2025-09-22
Title
Accordion < 2.3.16 - Missing Authorization
Slug
accordions
Published
2025-09-16
Title
Accordion < 2.3.16 - Missing Authorization
Slug
accordions-or-faqs
Published
2022-06-30
Title
Accordions < 2.0.3 - Unauthenticated Arbitrary Options Update
Slug
accordions-or-faqs
Published
2022-09-29
Title
Accordions < 2.1.0 - Authenticated Arbitrary Options Update
Slug
accordions-or-faqs
Published
2022-09-29
Title
Accordions < 2.1.0 - Admin+ Stored XSS
Slug
accordions-or-faqs
Published
2023-02-22
Title
Accordions < 2.3.1 - Admin+ Stored XSS
Slug
accordions-or-faqs
Published
2024-06-20
Title
Accordions <= 2.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
accordions-wp
Published
2023-10-29
Title
Accordion < 2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
accordions-wp
Published
2023-11-15
Title
Accordion < 2.7 - Authenticated (Editor+) Stored Cross-Site Scripting via accordion settings
Slug
accordions-wp
Published
2026-01-07
Title
Accordion < 3.0.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
accounting-for-woocommerce
Published
2024-12-04
Title
Accounting for WooCommerce < 1.6.7 - Reflected Cross-Site Scripting
Slug
accounting-for-woocommerce
Published
2025-03-11
Title
Accounting for WooCommerce <=1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
accounting-for-woocommerce
Published
2025-03-27
Title
Accounting for WooCommerce < 1.6.9 - Unauthenticated Local File Inclusion
Slug
accredible-certificates
Published
2023-12-19
Title
Accredible Certificates & Open Badges < 1.4.9 - Admin+ Stored XSS
Slug
accredible-certificates
Published
2025-04-09
Title
Accredible Certificates & Open Badges < 1.5.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter
Slug
accurate-form-data-real-time-form-validation
Published
2015-08-04
Title
WP Accurate Form Data <= 1.2 - Cross-Site Scripting (XSS) & CSRF
Slug
ace-post-type-builder
Published
2025-11-24
Title
Ace Post Type Builder < 2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Custom Taxonomy Deletion via 'taxonomy' Parameter
Slug
ace-user-management
Published
2025-10-15
Title
Ace User Management <= 2.0.3 - Subscriber+ Authentication Bypass via Password Rest
Slug
aceide
Published
2021-07-24
Title
AceIDE <= 2.6.2 - Authenticated (admin+) Arbitrary File Access
Slug
acf-better-search
Published
2019-06-27
Title
ACF Better Search <= 3.3.0 - Cross-Site Request Forgery (CSRF)
Slug
acf-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
acf-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
acf-blocks
Published
2025-06-19
Title
Gutenberg Blocks – ACF Blocks Suite <= 2.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
acf-city-selector
Published
2024-12-30
Title
ACF City Selector < 1.15.0 - Authenticated (Admin+) Arbitrary File Upload
Slug
acf-city-selector
Published
2025-04-01
Title
ACF City Selector <= 1.17.0 - Unauthenticated Sensitive Information Exposure