WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
auto-post-thumbnail
Published
2024-07-11
Title
Auto Featured Image (Auto Post Thumbnail) < 4.1.3- Missing Authorization
Slug
auto-post-thumbnail
Published
2025-10-27
Title
Auto Featured Image (Auto Post Thumbnail) < 4.2.0 - Authenticated (Author+) Server-Side Request Forgery
Slug
auto-post-thumbnail
Published
2025-12-15
Title
Auto Featured Image < 4.2.2 - Missing Authorization to Authenticated (Contributor+) Post Thumbnail Modification
Slug
auto-post-to-social-media-wp-to-social-champ
Published
2026-01-13
Title
SocialChamp with WordPress < 1.3.6 - Cross-Site Request Forgery to Plugin Settings Update
Slug
auto-post-woocommerce-products
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
auto-poster
Published
2024-04-05
Title
Auto Poster <= 1.2 - Authenticated (Administrator+) Arbitrary File Upload
Slug
auto-prune-posts
Published
2023-03-10
Title
Auto Prune Posts < 2.0.0 - Post Deletion Settings Update via CSRF
Slug
auto-prune-posts
Published
2024-10-30
Title
Auto Prune Posts < 3.0.0- Admin+ Stored XSS
Slug
auto-prune-posts
Published
2025-11-08
Title
Auto Prune Posts < 3.1.0 - Cross-Site Request Forgery
Slug
auto-refresh-single-page
Published
2024-03-04
Title
Auto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection
Slug
auto-rename-media-on-upload
Published
2023-03-20
Title
Auto Rename Media On Upload < 1.1.0 - Admin+ Stored XSS
Slug
auto-robot
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
auto-save-remote-images-drafts
Published
2025-09-09
Title
Auto Save Remote Images (Drafts) <= 1.0.9 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
auto-scroll-for-reading
Published
2025-04-01
Title
Auto scroll for reading <= 1.1.4 - Reflected Cross-Site Scripting
Slug
auto-seo
Published
2025-02-03
Title
Auto SEO < 2.6.6 - Stored XSS via CSRF
Slug
auto-tag-creator
Published
2023-11-07
Title
Auto Tag Creator <= 1.0.2 - Missing Authorization via tag_save_settings_callback
Slug
auto-tag-links
Published
2025-02-24
Title
Auto Tag Links <= 1.0.13 - Cross-Site Request Forgery
Slug
auto-terms-of-service-and-privacy-policy
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
auto-thickbox
Published
2025-07-03
Title
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library
Slug
auto-thickbox-plus
Published
2015-11-26
Title
Auto ThickBox Plus <= 1.9 - Reflected Cross-Site Scripting (XSS)
Slug
auto-thumbnailer
Published
2025-12-04
Title
Auto Thumbnailer <= 1.0 - Authenticated (Contributor+) Arbitrary File Upload
Slug
auto-translate
Published
2024-05-21
Title
Automatic Translator with Google Translate <= 1.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom Font
Slug
auto-upload-images
Published
2022-10-24
Title
Auto Upload Images < 3.3.1 - CSRF
Slug
auto-upload-images
Published
2022-10-24
Title
Auto Upload Images < 3.3.1 - Admin+ Stored Cross-Site Scripting
Slug
auto-upload-images
Published
2025-06-19
Title
Auto Upload Images <= 3.3.2 - Authenticated (Contributor+) Server-Side Request Forgery