WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
auto-attachments
Published
2025-06-12
Title
Auto Attachments <= 1.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
auto-bulb-finder-for-wp-wc
Published
2025-10-02
Title
Auto Bulb Finder for WordPress < 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
auto-date-year-month
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
auto-date-year-month
Published
2024-10-14
Title
AADMY – Add Auto Date Month Year Into Posts < 2.0.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
auto-delete-posts
Published
2022-05-23
Title
Auto Delete Posts <= 1.3.0 - Arbitrary Settings Update via CSRF
Slug
auto-excerpt-everywhere
Published
2023-10-27
Title
Auto Excerpt everywhere <= 1.5 - Cross-Site Request Forgery
Slug
auto-featured-image
Published
2024-06-26
Title
Auto Featured Image <= 1.2 - Authenticated (Contributor+) Arbitrary File Upload
Slug
auto-featured-image-auto-generated
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
auto-featured-image-from-title
Published
2024-09-30
Title
Auto Featured Image from Title < 2.4 - Reflected Cross-Site Scripting
Slug
auto-ftp
Published
2025-01-16
Title
Auto FTP <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
auto-hide-admin-bar
Published
2023-01-25
Title
Auto Hide Admin Bar < 1.6.2 - Admin+ Stored XSS
Slug
auto-hyperlink-urls
Published
2022-08-01
Title
Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing
Slug
auto-iframe
Published
2024-10-08
Title
Auto iFrame < 1.8 - Authenticated (Author+) Stored Cross-Site Scripting via tag Parameter
Slug
auto-iframe
Published
2024-12-18
Title
Auto iFrame < 2.0 - Contributor+ XSS via Shortcode
Slug
auto-install-free-ssl
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
auto-install-free-ssl
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
auto-keyword-backlink
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
auto-last-youtube-video
Published
2025-09-05
Title
Auto Last Youtube Video <= 1.0.7 - Cross-Site Request Forgery
Slug
auto-limit-posts-reloaded
Published
2023-10-26
Title
Auto Limit Posts Reloaded <= 2.5 - Cross-Site Request Forgery
Slug
auto-listings
Published
2024-01-31
Title
Auto Listings < 2.6.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
auto-listings
Published
2025-12-30
Title
Auto Listings < 2.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
auto-load-next-post
Published
2025-03-24
Title
Auto Load Next Post <= 1.5.14 - Cross-Site Request Forgery
Slug
auto-location-for-wp-job-manager
Published
2023-07-03
Title
Auto Location for WP Job Manager via Google < 1.1 - Admin+ Cross Site Scripting
Slug
auto-login-after-registration
Published
2025-07-08
Title
Auto Login After Registration <= 1.0.0 - Reflected Cross-Site Scripting
Slug
auto-login-new-user-after-registration
Published
2023-10-19
Title
Auto Login New User After Registration <= 1.9.6 - CSRF