WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
auto-x-line
Published
2026-02-13
Title
Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call
Slug
auto-youtube-importer
Published
2023-02-03
Title
Auto YouTube Importer <= 1.0.3 - Settings Update via CSRF
Slug
autocatset
Published
2025-09-10
Title
AutoCatSet <= 2.1.4 - Cross-Site Request Forgery
Slug
autocomplete-address-and-location-picker-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
autocomplete-address-and-location-picker-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
autocomplete-location-field-contact-form-7
Published
2023-11-21
Title
Autocomplete Location field Contact Form 7 < 3.0 - Admin+ Store Cross-Site Scripting
Slug
autocomplete-location-field-contact-form-7-pro
Published
2023-11-21
Title
Autocomplete Location field Contact Form 7 < 3.0 - Admin+ Store Cross-Site Scripting
Slug
autocompleter
Published
2025-01-03
Title
Autocompleter <= 1.3.5.2 - Cross-Site Request Forgery
Slug
autogen-headers-menu
Published
2026-01-08
Title
Autogen Headers Menu <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'head_class' Shortcode Parameter
Slug
autolinks
Published
2022-03-28
Title
Autolinks <= 1.0.1 - Stored Cross-Site Scripting via CSRF
Slug
autolisticle-automatically-update-numbered-list-articles
Published
2024-11-22
Title
AutoListicle: Automatically Update Numbered List Articles < 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
automail
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
automail
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
automate-hub-free-by-sperse-io
Published
2025-01-06
Title
Automate Hub Free by Sperse.IO <= 1.7.0 - Reflected Cross-Site Scripting
Slug
automate-hub-free-by-sperse-io
Published
2025-01-23
Title
Automate Hub Free by Sperse.IO <= 1.7.0 - Cross-Site Request Forgery to Activation Status Update
Slug
automated-editor
Published
2023-10-13
Title
Automated Editor <= 1.3 - Arbitrary Settings Update via CSRF
Slug
automatewoo
Published
2023-05-15
Title
AutomateWoo < 5.7.2 - ShopManager+ SQLi
Slug
automatewoo
Published
2023-06-26
Title
AutomateWoo < 5.7.6 - Cross-Site Request Forgery
Slug
automatewoo
Published
2023-05-15
Title
AutomateWoo < 5.7.2 - Cross-Site Request Forgery
Slug
automatewoo
Published
2023-06-26
Title
AutomateWoo < 5.7.6 - Missing Authorization
Slug
automatic-ban-ip
Published
2025-04-09
Title
Automatic Ban IP <= 1.0.7 - Reflected Cross-Site Scripting
Slug
automatic-domain-changer
Published
2022-05-31
Title
Automatic Domain Changer < 2.0.3 - Reflected Cross-Site Scripting
Slug
automatic-featured-images-from-videos
Published
2025-04-01
Title
Automatic Featured Images from Videos < 1.2.5 - Missing Authorization
Slug
automatic-featured-images-from-videos
Published
2026-01-25
Title
Automatic Featured Images from Videos < 1.2.8 - Missing Authorization
Slug
automatic-grid-image-listing
Published
2022-04-19
Title
AGIL <= 1.0 - Admin+ Arbitrary File Upload