WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
apa-banner-slider
Published
2024-10-17
Title
Apa Banner Slider <= 1.0.0 - Cross-Site Request Forgery to SLQ Injection
Slug
apa-register-newsletter-form
Published
2024-10-18
Title
APA Register Newsletter Form <= 1.0.0 - Cross-Site Request Forgery to SQL Injection
Slug
aparat
Published
2023-11-28
Title
Aparat <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
aparat-responsive
Published
2025-02-13
Title
Aparat Responsive <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
aparat-shortcode
Published
2025-09-05
Title
Aparat Video Shortcode <= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Unauthenticated Arbitrary File Upload
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Unauthenticated Stored Cross-Site Scripting
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Authenticated (Subscriber+) SQL Injection
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Unauthenticated SQL Injection
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Authenticated (Subscriber+) Privilege Escalation
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 (17-08-2023) - Authenticated (Subscriber+) Arbitrary File Upload
Slug
apartment-management
Published
2025-04-17
Title
WPAMS <= 44.0 - Unauthenticated Local File Inclusion
Slug
apartment-management
Published
2026-04-07
Title
WPAMS - Apartment Management System for wordpress < 49.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
apcu-manager
Published
2026-06-08
Title
APCu Manager < 4.5.0 - Unauthenticated Stored XSS via Cache Key Pollution
Slug
apex-notification-bar-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
apexchat
Published
2023-04-18
Title
ApexChat < 1.3.2 - Admin+ Stored XSS
Slug
aphorismus
Published
2024-12-12
Title
Aphorismus <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
api-bearer-auth
Published
2019-09-05
Title
API Bearer Auth < 20190908 - Unauthenticated Reflected XSS
Slug
api-bing-map-2018
Published
2023-10-12
Title
WP Bing Map Pro < 5.0 - CSRF
Slug
api-info-themes-plugins-wp-org
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
api-key-for-google-maps
Published
2022-06-08
Title
API KEY for Google Maps < 1.2.2 - Arbitrary API Key Update via CSRF
Slug
api2cart-bridge-connector
Published
2022-10-28
Title
Api2Cart Bridge Connector < 1.2.0 - Unauthenticated Arbitrary File Upload
Slug
api2cart-bridge-connector
Published
2022-10-28
Title
Api2Cart Bridge Connector < 1.2.0 - Unauthenticated RCE
Slug
apimo
Published
2025-03-31
Title
Apimo Connector <= 2.6.5 - Settings Update via CSRF
Slug
apimo
Published
2026-01-03
Title
Apimo Connector <= 2.6.4 - Missing Authorization