WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
automation-web-platform
Published
2024-11-19
Title
Wawp < 3.0.18 - Unauthenticated Privilege Escalation
Slug
automation-web-platform
Published
2025-12-31
Title
Wawp < 4.5 - Missing Authorization
Slug
automatorwp
Published
2021-09-28
Title
AutomatorWP < 1.7.6 - Missing Authorization and Privilege Escalation
Slug
automatorwp
Published
2023-01-20
Title
AutomatorWP < 2.5.1 - Object Deletion via CSRF
Slug
automatorwp
Published
2024-12-18
Title
AutomatorWP < 5.1.0 - Reflected Cross-Site Scripting via a-0-o-search_field_value
Slug
automatorwp
Published
2025-05-19
Title
AutomatorWP < 5.2.2 - Authenticated (Administrator+) SQL Injection
Slug
automatorwp
Published
2025-06-13
Title
AutomatorWP < 5.2.6 - Authenticated (Administrator+) SQL Injection via field_conditions
Slug
automatorwp
Published
2025-09-08
Title
AutomatorWP < 5.3.8 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
Slug
automatorwp
Published
2025-09-08
Title
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress < 5.3.7 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation
Slug
automatorwp
Published
2025-06-19
Title
AutomatorWP < 5.2.5 - Authenticated (Administrator+) SQL Injection
Slug
automatorwp
Published
2026-04-23
Title
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress < 5.6.8 - Missing Authorization
Slug
automatorwp
Published
2026-04-29
Title
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress < 5.6.8 - Unauthenticated Stored Cross-Site Scripting
Slug
automizy-gravity-forms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
automizy-gravity-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
automotive
Published
2026-01-05
Title
Automotive Listings < 18.7 - Unauthenticated SQL Injection
Slug
autopilot
Published
2024-11-19
Title
Ortto < 1.0.21 - Reflected Cross-Site Scripting
Slug
autoptimize
Published
2020-08-24
Title
Autoptimize < 2.7.7 - Authenticated Arbitrary File Upload
Slug
autoptimize
Published
2021-05-07
Title
Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
autoptimize
Published
2020-10-09
Title
Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"
Slug
autoptimize
Published
2020-10-09
Title
Autoptimize < 2.7.8 - Race Condition leading to RCE
Slug
autoptimize
Published
2020-10-09
Title
Autoptimize < 2.7.8 - Authenticated Stored XSS via File Upload
Slug
autoptimize
Published
2022-08-17
Title
Autoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting
Slug
autoptimize
Published
2022-12-05
Title
Autoptimize < 3.1.0 - Sensitive Data Disclosure
Slug
autoptimize
Published
2023-05-02
Title
Autoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings Import
Slug
autoptimize
Published
2025-12-03
Title
Autoptimize < 3.1.14 - Contributor+ Stored XSS