WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
appsero-helper
Published
2025-04-21
Title
Appsero Helper < 1.3.5 - Authenticated (Subscriber+) SQL Injection
Slug
appsplate
Published
2024-12-11
Title
Appsplate <= 2.1.3 - Unauthenticated SQL Injection
Slug
appten-image-rotator
Published
2025-02-03
Title
Image Rotator <= 2.0 - Reflected Cross-Site Scripting
Slug
apptha-banner
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
apptha-slider-gallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
apptha-slider-gallery
Published
2025-05-29
Title
Apptha Slider Gallery <= 2.5 - Unauthenticated Arbitrary File Read
Slug
apptha-slider-gallery
Published
2026-06-09
Title
Apptha Slider Gallery <= 1.0 - Unauthenticated Arbitrary File Download
Slug
apptha-slider-gallery
Published
2026-06-09
Title
Apptha Slider Gallery <= 1.0 - Unauthenticated SQL Injection
Slug
apptivo-business-site
Published
2022-11-30
Title
Apptivo Business Site CRM < 3.0.14 - Admin+ Stored XSS
Slug
apptivo-business-site
Published
2025-02-18
Title
Apptivo Business Site CRM <= 5.3 - Cross-Site Request Forgery to IP Address Block
Slug
apptivo-business-site
Published
2025-04-02
Title
Apptivo Business Site CRM < 5.4 - Unauthenticated Arbitrary Content Deletion
Slug
appy-pie-connect-for-woocommerce
Published
2025-10-02
Title
Appy Pie Connect for WooCommerce <= 1.1.2 - Unauthenticated Privilege Escalation
Slug
april-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
april-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload
Slug
april-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates
Slug
aprils-call-posts
Published
2024-11-23
Title
April's Call Posts < 2.2.0 - Stored XSS via CSRF
Slug
aprils-super-functions-pack
Published
2014-08-01
Title
April's Super Functions Pack 1.4.7 - readme.php page Parameter Reflected XSS
Slug
aptivada-for-wp
Published
2025-05-16
Title
Aptivada for WP <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
apus-framework
Published
2025-02-11
Title
Apus Framework < 2.5 - Authenticated (Subscriber+) Arbitrary Options Update in import_page_options
Slug
aqua-svg-sprite
Published
2024-11-12
Title
Aqua SVG Sprite <= 3.0.14 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
ar-contactus
Published
2020-06-21
Title
All in One Support Button < 1.8.8 - Authenticated Stored Cross-Site Scripting
Slug
ar-for-woocommerce
Published
2024-10-28
Title
AR For Woocommerce < 7.0 - Unauthenticated Arbitrary File Upload
Slug
ar-for-woocommerce
Published
2026-07-02
Title
AR for WooCommerce < 8.41 - Unauthenticated Path Traversal to Arbitrary File Read via 'file' Parameter
Slug
ar-for-wordpress
Published
2024-10-25
Title
AR For WordPress < 7.0 - Unauthenticated Arbitrary File Upload
Slug
ar-for-wordpress
Published
2024-12-12
Title
AR for WordPress < 7.4 - Missing Authorization to Unauthenticated Limited File Upload