WordPress Plugin Vulnerabilities | Page 92 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

appointment-hour-booking

Published

2024-04-22

Title

Appointment Hour Booking < 1.4.57 - Captcha Bypass

Slug

appointment-hour-booking

Published

2026-01-27

Title

Appointment Hour Booking – Booking Calendar < 1.5.61 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration

Slug

appointment-hour-booking

Published

2026-07-23

Title

Appointment Hour Booking – Booking Calendar < 1.5.87 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

appointment-hour-booking

Published

2026-08-03

Title

Appointment Hour Booking < 1.5.88 - Unauthenticated Booking Price Manipulation via tcost Parameter

Slug

appointment-hour-booking

Published

2026-08-18

Title

Appointment Hour Booking – Booking Calendar < 1.5.95 - Missing Authorization

Slug

appointment-hour-booking

Published

2026-09-14

Title

Appointment Hour Booking < 1.5.95 - Unauthenticated Booking Capacity Bypass via Multi-Appointment Submission

Slug

appointment-hour-booking

Published

2026-09-30

Title

Appointment Hour Booking < 1.5.98 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer

Slug

Published

2017-10-02

Title

Appointments <= 2.2.1 - Unauthenticated PHP Object Injection

Slug

Published

2024-11-01

Title

Appointmind < 4.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Slug

Published

2025-09-16

Title

Appointmind < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

appointy-appointment-scheduler

Published

2025-03-31

Title

Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change

Slug

Published

2023-11-16

Title

AppPresser < 4.3.0 - Insecure Password Reset Mechanism

Slug

Published

2024-04-05

Title

AppPresser < 4.3.1 - Cross-Site Request Forgery via toggle_logging_callback()

Slug

Published

2024-04-10

Title

AppPresser < 4.3.1 - Cross-Site Request Forgery via force_logging_off()

Slug

Published

2024-04-22

Title

AppPresser < 4.3.1 - Missing Authorization

Slug

Published

2024-05-28

Title

AppPresser < 4.4.0 - Improper Missing Encryption Exception Handling to Authentication Bypass

Slug

Published

2024-10-15

Title

AppPresser < 4.4.5 - Privilege Escalation and Account Takeover via Weak OTP

Slug

Published

2024-11-25

Title

AppPresser < 4.4.7 - Unauthenticated Privilege Escalation via Password Reset

Slug

Published

2025-03-12

Title

AppPresser – Mobile App Framework < 4.4.11 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2025-10-29

Title

AppPresser – Mobile App Framework < 4.5.1 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure

Slug

Published

2025-03-20

Title

AppReview <= 0.2.9 - Reflected Cross-Site Scripting

Slug

Published

2025-03-10

Title

Appsero Helper < 1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Slug

Published

2025-04-21

Title

Appsero Helper < 1.3.5 - Authenticated (Subscriber+) SQL Injection

Slug

Published

2024-12-11

Title

Appsplate <= 2.1.3 - Unauthenticated SQL Injection

Slug

appten-image-rotator

Published

2025-02-03

Title

Image Rotator <= 2.0 - Reflected Cross-Site Scripting