WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
auto-login-new-user-after-registration
Published
2023-10-19
Title
Auto Login New User After Registration <= 1.9.6 - Stored XSS via CSRF
Slug
auto-login-when-resister
Published
2023-04-17
Title
Enable/Disable Auto Login when Register <= 1.1.0 - Settings Update via CSRF
Slug
auto-more-tag
Published
2022-07-18
Title
Auto More Tag <= 4.0.0 - Admin+ Stored Cross-Site Scripting
Slug
auto-post-after-image-upload
Published
2025-03-31
Title
Auto Post After Image Upload <= 1.6 - Missing Authorization
Slug
auto-post-scheduler
Published
2026-03-30
Title
Auto Post Scheduler <= 1.84 - Cross-Site Request Forgery to Stored Cross-Site Scripting via aps_options_page
Slug
auto-post-thumbnail
Published
2021-11-15
Title
Auto Featured Image < 3.9.3 - Reflected Cross-Site Scripting
Slug
auto-post-thumbnail
Published
2023-02-14
Title
Auto Featured Image < 3.9.16 - Author+ Arbitrary File Upload
Slug
auto-post-thumbnail
Published
2024-04-25
Title
Auto Featured Image (Auto Post Thumbnail) < 4.1.4 - Author+ SSRF
Slug
auto-post-thumbnail
Published
2024-05-30
Title
Auto Featured Image (Auto Post Thumbnail) <= 4.0.0 - Authenticated (Author+) Server-Side Request Forgery
Slug
auto-post-thumbnail
Published
2024-07-11
Title
Auto Featured Image (Auto Post Thumbnail) < 4.1.3- Missing Authorization
Slug
auto-post-thumbnail
Published
2025-10-27
Title
Auto Featured Image (Auto Post Thumbnail) < 4.2.0 - Authenticated (Author+) Server-Side Request Forgery
Slug
auto-post-thumbnail
Published
2025-12-15
Title
Auto Featured Image < 4.2.2 - Missing Authorization to Authenticated (Contributor+) Post Thumbnail Modification
Slug
auto-post-to-social-media-wp-to-social-champ
Published
2026-01-13
Title
SocialChamp with WordPress < 1.3.6 - Cross-Site Request Forgery to Plugin Settings Update
Slug
auto-post-woocommerce-products
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
auto-poster
Published
2024-04-05
Title
Auto Poster <= 1.2 - Authenticated (Administrator+) Arbitrary File Upload
Slug
auto-prune-posts
Published
2023-03-10
Title
Auto Prune Posts < 2.0.0 - Post Deletion Settings Update via CSRF
Slug
auto-prune-posts
Published
2024-10-30
Title
Auto Prune Posts < 3.0.0- Admin+ Stored XSS
Slug
auto-prune-posts
Published
2025-11-08
Title
Auto Prune Posts < 3.1.0 - Cross-Site Request Forgery
Slug
auto-refresh-single-page
Published
2024-03-04
Title
Auto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection
Slug
auto-rename-media-on-upload
Published
2023-03-20
Title
Auto Rename Media On Upload < 1.1.0 - Admin+ Stored XSS
Slug
auto-robot
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
auto-save-remote-images-drafts
Published
2025-09-09
Title
Auto Save Remote Images (Drafts) <= 1.0.9 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
auto-scroll-for-reading
Published
2025-04-01
Title
Auto scroll for reading <= 1.1.4 - Reflected Cross-Site Scripting
Slug
auto-seo
Published
2025-02-03
Title
Auto SEO < 2.6.6 - Stored XSS via CSRF
Slug
auto-tag-creator
Published
2023-11-07
Title
Auto Tag Creator <= 1.0.2 - Missing Authorization via tag_save_settings_callback