WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
automatic-internal-links-for-seo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
automatic-internal-links-for-seo
Published
2024-11-26
Title
Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) < 1.2.2 - Authenticated (Administrator+) SQL Injection via post_id Parameter
Slug
automatic-pages-for-privacy-policy-terms-about-and-contact
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
automatic-post-categories
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
automatic-post-categories
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
automatic-translation
Published
2024-10-25
Title
Automatic Translation <= 1.0.4 - Unauthenticated Arbitrary File Upload
Slug
automatic-user-roles-switcher
Published
2022-10-10
Title
Automatic User Roles Switcher < 1.1.2 - Subscriber+ Privilege Escalation
Slug
automatic-youtube-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
automatic-youtube-gallery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
automatic-youtube-gallery
Published
2023-09-05
Title
Automatic YouTube Gallery < 2.3.5 - Missing Authorization via AJAX actions
Slug
automatic-youtube-video-posts
Published
2023-11-29
Title
Automatic Youtube Video Posts Plugin <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
automatically-hierarchic-categories-in-menu
Published
2024-09-30
Title
Automatically Hierarchic Categories in Menu < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
automatically-hierarchic-categories-in-menu
Published
2025-01-30
Title
Automatically Hierarchic Categories in Menu < 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
automatically-hierarchic-categories-in-menu
Published
2025-06-19
Title
Automatically Hierarchic Categories in Menu < 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
automation-web-platform
Published
2024-11-19
Title
Wawp < 3.0.18 - Unauthenticated Privilege Escalation
Slug
automation-web-platform
Published
2025-12-31
Title
Wawp < 4.5 - Missing Authorization
Slug
automatorwp
Published
2021-09-28
Title
AutomatorWP < 1.7.6 - Missing Authorization and Privilege Escalation
Slug
automatorwp
Published
2023-01-20
Title
AutomatorWP < 2.5.1 - Object Deletion via CSRF
Slug
automatorwp
Published
2024-12-18
Title
AutomatorWP < 5.1.0 - Reflected Cross-Site Scripting via a-0-o-search_field_value
Slug
automatorwp
Published
2025-05-19
Title
AutomatorWP < 5.2.2 - Authenticated (Administrator+) SQL Injection
Slug
automatorwp
Published
2025-06-13
Title
AutomatorWP < 5.2.6 - Authenticated (Administrator+) SQL Injection via field_conditions
Slug
automatorwp
Published
2025-09-08
Title
AutomatorWP < 5.3.8 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
Slug
automatorwp
Published
2025-09-08
Title
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress < 5.3.7 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation
Slug
automatorwp
Published
2025-06-19
Title
AutomatorWP < 5.2.5 - Authenticated (Administrator+) SQL Injection
Slug
automizy-gravity-forms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius