WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
animated-number-counters
Published
2026-10-12
Title
Animated Number Counters < 3.1 - Authenticated (Editor+) SQL Injection via 'counterid' Parameter
Slug
animated-pixel-marquee-creator
Published
2025-12-11
Title
Animated Pixel Marquee Creator <= 1.0.0 - Cross-Site Request Forgery via 'marquee' Parameter
Slug
animated-svg
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
animated-text-block
Published
2025-02-24
Title
Animated Text Block < 1.0.8 - Missing Authorization
Slug
animated-text-block
Published
2026-10-27
Title
Animated Text Block < 1.2.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute
Slug
animated-typed-js-shortcode
Published
2024-07-10
Title
Animated Typed JS Shortcode < 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
animated-typing-effect
Published
2023-08-17
Title
93digital Typing Effect < 1.3.7 - Contributor+ Stored XSS
Slug
animated-typing-effect
Published
2026-08-18
Title
Typing Effect <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
animategl
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
animategl
Published
2025-01-31
Title
AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations <= 1.4.23 - Missing Authorization to Unauthenticated Settings Update
Slug
animation-addons-for-elementor
Published
2024-12-17
Title
Animation Addons for Elementor < 1.1.7 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template
Slug
animation-addons-for-elementor
Published
2025-12-15
Title
Animation Addons for Elementor < 2.4.6 - Authenticated (Contributor+) Arbitrary Content Deletion
Slug
animation-addons-for-elementor
Published
2026-03-01
Title
Animation Addons for Elementor <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
animation-addons-for-elementor
Published
2026-06-09
Title
Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates < 4.2.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters
Slug
animation-addons-for-elementor
Published
2026-05-26
Title
Animation Addons for Elementor < 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Weather Widget
Slug
animation-addons-for-elementor
Published
2026-07-13
Title
Animation Addons for Elementor < 2.7.0 - Author+ Stored XSS via SVG Upload
Slug
animation-addons-for-elementor
Published
2026-05-26
Title
Animation Addons for Elementor < 2.6.4 - Contributor+ Stored Cross-Site Scripting
Slug
animation-addons-for-elementor
Published
2026-05-26
Title
Animation Addons for Elementor < 2.6.4 - Contributor+ Stored Cross-Site Scripting
Slug
animation-addons-for-elementor
Published
2026-08-17
Title
Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery
Slug
animation-addons-for-elementor-pro
Published
2025-03-03
Title
Animation Addons for Elementor Pro < 1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Slug
annasta-woocommerce-product-filters
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
annasta-woocommerce-product-filters
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
annie
Published
2025-01-16
Title
Annie <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
annie
Published
2025-01-16
Title
Annie <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
annonces
Published
2014-08-01
Title
Annonces 1.2.0.1 - admin/theme.php File Upload PHP Code Execution