WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
askeet
Published
2026-08-04
Title
Askeet < 3.1 - Authenticated (Administrator+) SQL Injection via 'sql_query' Parameter
Slug
asmember
Published
2023-02-24
Title
asMember <= 1.5.4 - Admin+ Stored XSS
Slug
aspose-cloud-ebook-generator
Published
2015-03-27
Title
Aspose Cloud eBook Generator - File Download
Slug
aspose-doc-exporter
Published
2015-03-28
Title
Aspose.Words Exporter < 2.0 - Unauthenticated Arbitrary File Download
Slug
aspose-doc-exporter
Published
2024-04-12
Title
Aspose.Words Exporter <= 6.3.1 - Missing Authorization
Slug
aspose-importer-exporter
Published
2015-03-28
Title
Aspose Importer & Exporter 1.0 - Arbitrary File Download
Slug
aspose-pdf-exporter
Published
2015-03-28
Title
Aspose PDF Exporter - Arbitrary File Download
Slug
asset-manager
Published
2014-08-01
Title
Asset Manager 0.2 - Arbitrary File Upload
Slug
asset-manager
Published
2014-08-01
Title
Asset Manager - upload.php Arbitrary Code Execution
Slug
assist24it
Published
2024-11-08
Title
Assist24 Help Desk <= 20150401.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
assistant
Published
2023-07-26
Title
Assistant < 1.4.4 - Editor+ SSRF
Slug
assistant
Published
2024-04-25
Title
Assistant – Every Day Productivity Apps < 1.4.9.2 - Unauthenticated Sensitive Information Exposure
Slug
assistant
Published
2025-02-22
Title
Assistant < 1.5.1.1 - Authenticated (Editor+) PHP Object Injection
Slug
assistant
Published
2025-09-03
Title
WordPress Assistant < 1.5.3 - Reflected Cross-Site Scripting
Slug
assistant-for-nextgen-gallery
Published
2025-08-14
Title
Assistant for NextGEN Gallery <= 1.0.9 - Unauthenticated Arbitrary Directory Deletion
Slug
assistio
Published
2026-06-23
Title
Assistio <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Deletion via assistio_plugin_delete_assistio_settings AJAX Action
Slug
astra-addon
Published
2021-07-08
Title
Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection
Slug
astra-addon
Published
2023-12-05
Title
Astra Pro < 4.3.2 - Authenticated(Contributor+) Remote Code Execution via Metabox
Slug
astra-bulk-edit
Published
2023-09-22
Title
Astra Bulk Edit < 1.2.8 - Missing Authorization
Slug
astra-bulk-edit
Published
2026-03-01
Title
Astra Bulk Edit < 1.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
astra-import-export
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
astra-import-export
Published
2020-09-16
Title
Import / Export Customizer Settings < 1.0.4 - Cross-Site Request Forgery
Slug
astra-pro-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.5 - Incorrect Authorization
Slug
astra-pro-sites
Published
2023-09-05
Title
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
astra-sites
Published
2021-11-11
Title
Starter Templates < 2.7.1 - Contributor+ Block Import to Stored XSS