WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
announce-from-the-dashboard
Published
2023-02-13
Title
Announce from the Dashboard < 1.5.2 - Admin+ Stored XSS
Slug
announce-from-the-dashboard
Published
2024-04-03
Title
Announce from the Dashboard < 1.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
announcekit
Published
2024-04-29
Title
AnnounceKit <= 2.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
announcer
Published
2024-04-05
Title
Announcer – Notification & message bars < 6.0.1 - Missing Authorization
Slug
announces
Published
2014-08-01
Title
Annonces 1.2.0.1 - Shell Upload
Slug
annuncifunebri-onoranza
Published
2025-12-12
Title
AnnunciFunebri Impresa < 4.7.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Deletion
Slug
anomify
Published
2026-05-19
Title
Anomify AI <= 0.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'anomify_api_key' Parameter
Slug
anomify
Published
2026-05-19
Title
Anomify AI <= 0.3.6 - Cross-Site Request Forgery
Slug
anonform-embedded-secure-form
Published
2025-06-19
Title
ANON::form embedded secure form < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
anonymize-links
Published
2025-01-16
Title
Anonymize Links <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
anonymous-restricted-content
Published
2024-02-02
Title
Anonymous Restricted Content < 1.6.3 - Protection Mechanism Bypass
Slug
anonymous-restricted-content
Published
2024-11-20
Title
Anonymous Restricted Content < 1.6.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
another-events-calendar
Published
2025-03-11
Title
Another Events Calendar <= 1.7.0 - Reflected Cross-Site Scripting
Slug
another-wordpress-classifieds-plugin
Published
2012-04-03
Title
Another WordPress Classifieds < 2.0 - Unspecified Image Upload
Slug
another-wordpress-classifieds-plugin
Published
2014-11-10
Title
Another WordPress Classifieds Plugin < 3.0 - SQLi & XSS
Slug
another-wordpress-classifieds-plugin
Published
2022-10-10
Title
AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
Slug
another-wordpress-classifieds-plugin
Published
2023-09-05
Title
AWP Classifieds < 4.3.1 - Categories Mgt via CSRF
Slug
another-wordpress-classifieds-plugin
Published
2024-04-05
Title
AWP Classifieds < 4.3.2 - Missing Authorization
Slug
another-wordpress-classifieds-plugin
Published
2024-04-12
Title
AWP Classifieds < 4.3.2 - Cross-Site Request Forgery
Slug
another-wordpress-classifieds-plugin
Published
2025-09-22
Title
AWP Classifieds < 4.4.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
another-wordpress-classifieds-plugin
Published
2026-01-16
Title
AWP Classifieds < 4.4.4 - Unauthenticated Information Exposure
Slug
another-wordpress-classifieds-plugin
Published
2026-04-08
Title
AWP Classifieds < 4.4.5 - Missing Authorization
Slug
another-wordpress-classifieds-plugin
Published
2026-05-04
Title
AWP Classifieds < 4.4.6.1 - Unauthenticated SQL Injection via 'regions'
Slug
another-wordpress-classifieds-plugin
Published
2026-05-12
Title
AWP Classifieds < 4.4.6 - Missing Authorization
Slug
another-wordpress-classifieds-plugin
Published
2026-07-23
Title
AWP Classifieds < 4.4.8 - Unauthenticated SQL Injection