WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ap-background
Published
2025-10-02
Title
AP Background <= 3.8.2 - Cross-Site Request Forgery
Slug
ap-background
Published
2025-10-02
Title
AP Background <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ap-companion
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-contact-form
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-custom-testimonial
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-custom-testimonial
Published
2022-01-25
Title
AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting
Slug
ap-custom-testimonial
Published
2022-01-25
Title
AP Custom Testimonial < 1.4.8 - Admin+ SQL Injection
Slug
ap-google-maps
Published
2025-03-24
Title
Arrow Maps <= 1.0.9 - Reflected Cross-Site Scripting
Slug
ap-honeypot
Published
2025-09-05
Title
AP HoneyPot WordPress Plugin <= 1.4 - Cross-Site Request Forgery
Slug
ap-mega-menu
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-mega-menu
Published
2022-02-28
Title
AP Mega Menu < 3.0.8 - Reflected Cross-Site Scripting
Slug
ap-plugin-scripteo
Published
2025-05-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager < 4.89 - Unauthenticated SQL Injection
Slug
ap-plugin-scripteo
Published
2025-05-16
Title
Ads Pro Plugin <= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ap-plugin-scripteo
Published
2025-05-21
Title
Ads Pro Plugin <= 4.89 - Unauthenticated Local File Inclusion
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplate
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion
Slug
ap-plugin-scripteo
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id'
Slug
ap-plugin-scripteo
Published
2025-11-23
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id
Slug
ap-plugin-scripteo
Published
2026-02-20
Title
Ads Pro < 5.1 - Missing Authorization
Slug
ap-pricing-tables-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
ap-pricing-tables-lite
Published
2022-02-28
Title
AP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site Scripting
Slug
ap-pricing-tables-lite
Published
2023-05-10
Title
AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi