WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
artplacer-widget
Published
2024-06-28
Title
ArtPlacer Widget < 2.21.2 - Stored XSS via CSRF
Slug
artplacer-widget
Published
2024-06-28
Title
ArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion
Slug
artplacer-widget
Published
2025-11-23
Title
ArtPlacer Widget < 2.23 - Authenticated (Contributor+) SQL Injection
Slug
artplacer-widget
Published
2026-01-22
Title
ArtPlacer Widget <= 2.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
aruba-hispeed-cache
Published
2023-11-28
Title
Aruba HiSpeed Cache < 2.0.7 - Unauthenticated Log File Access
Slug
aruba-hispeed-cache
Published
2024-08-07
Title
Aruba HiSpeed Cache < 2.0.13 - Missing Authorization
Slug
aruba-hispeed-cache
Published
2026-01-01
Title
Aruba HiSpeed Cache < 3.0.3 - Missing Authorization
Slug
aruba-hispeed-cache
Published
2026-02-18
Title
Aruba HiSpeed Cache < 3.0.3 - Missing Authorization to Unauthenticated Plugin's Settings Modification
Slug
aruba-hispeed-cache
Published
2026-02-18
Title
Aruba HiSpeed Cache < 3.0.3 - Reflected Cross-Site Scripting
Slug
aruba-hispeed-cache
Published
2026-02-18
Title
Aruba HiSpeed Cache < 3.0.5 - Missing Authorization
Slug
aryo-activity-log
Published
2014-08-01
Title
Activity Log - Full Path Disclosure
Slug
aryo-activity-log
Published
2016-07-11
Title
Activity Log <= 2.3.1 - Stored Cross-Site Scripting (XSS)
Slug
aryo-activity-log
Published
2016-08-03
Title
Activity Log <= 2.3.2 - Cross-Site Scripting (XSS)
Slug
aryo-activity-log
Published
2016-08-03
Title
Activity Log <= 2.3.2 - Cross-Site Scripting (XSS) in 'page'
Slug
aryo-activity-log
Published
2018-03-08
Title
Activity Log <= 2.4.0 - Multiple Cross-Site Scripting (XSS)
Slug
aryo-activity-log
Published
2021-05-03
Title
Activity Log < 2.7.0 - Authenticated SQL Injection
Slug
aryo-activity-log
Published
2022-09-25
Title
Activity Log < 2.8.4 - CSV Injection
Slug
aryo-activity-log
Published
2023-09-01
Title
Activity Log < 2.8.8 - IP Spoofing
Slug
aryo-activity-log
Published
2024-11-20
Title
Activity Log – Monitor & Record User Changes < 2.11.2 - Unauthenticated Stored XSS via Event Context
Slug
as-create-pinterest-pinboard-pages
Published
2022-08-10
Title
Create Pinterest Pinboard Pages <= 1.0 - Subscriber+ Settings Update to Stored XSS
Slug
as-english-admin
Published
2025-03-11
Title
AS English Admin <= 1.0.0 - Open Redirection
Slug
as-password-field-in-default-registration-form
Published
2026-01-05
Title
AS Password Field In Default Registration Form <= 2.0.0 - Unauthenticated Privilege Escalation via Account Takeover
Slug
asf-allow-svg-files
Published
2022-05-30
Title
Allow SVG Files < 1.1 - Admin+ Arbitrary File Upload
Slug
asf-allow-svg-files
Published
2022-07-04
Title
Allow SVG Files <= 1.1 - Author+ Stored Cross Site Scripting via SVG
Slug
asgard
Published
2024-12-19
Title
Asgard Security Scanner <= 0.7 - Reflected XSS