WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
autoptimize
Published
2026-03-20
Title
Autoptimize < 3.1.15 - Contributor+ Stored XSS via 'ao_post_preload' Meta Value
Slug
autoptimize
Published
2026-03-20
Title
Autoptimize < 3.1.15 - Contributor+ Stored XSS via Lazy-loaded Image Attributes
Slug
autoptimize
Published
2026-04-27
Title
Multiple Plugins - Unauthenticated Stored XSS via Minify Library
Slug
autosave-net
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
autosave-net
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
autoshare-for-twitter
Published
2026-01-22
Title
Autoshare for Twitter < 2.3.2 - Missing Authorization
Slug
autoship-cloud
Published
2025-02-20
Title
Autoship Cloud for WooCommerce Subscription Products < 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
autoship-cloud
Published
2025-02-22
Title
Autoship Cloud for WooCommerce Subscription Products < 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
autotitle-for-wordpress
Published
2024-01-02
Title
Autotitle for WordPress <= 1.0.3 - Settings Update to Stored XSS via CSRF
Slug
autowp-ai-content-writer-rewriter
Published
2024-12-11
Title
AutoWP < 2.0.9 - Cross-Site Request Forgery
Slug
autowp-ai-content-writer-rewriter
Published
2025-08-21
Title
AutoWP <= 2.2.4 - Missing Authorization
Slug
auxin-elements
Published
2022-06-20
Title
Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-Scripting
Slug
auxin-elements
Published
2022-11-17
Title
Shortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection Injection
Slug
auxin-elements
Published
2023-11-15
Title
Shortcodes and extra features for Phlox theme < 2.15.0 - Unauthenticated Local File Inclusion
Slug
auxin-elements
Published
2023-12-06
Title
Shortcodes and extra features for Phlox theme < 2.15.5 - Contributor+ Stored XSS
Slug
auxin-elements
Published
2024-03-29
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Subscriber+ Template Import
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via Custom JS
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via aux_gmaps Shortcode
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via title_tag
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ XSS via HTML Element
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.6 - Contributor+ Stored XSS via Accordion Widget
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.17.6 - Subscriber+ PHP Object Injection
Slug
auxin-elements
Published
2024-04-15
Title
Shortcodes and extra features for Phlox theme < 2.15.8 - Contributor+ Stored XSS via aux_timeline Shortcode
Slug
auxin-elements
Published
2024-10-04
Title
Shortcodes and extra features for Phlox theme < 2.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker Widgets
Slug
auxin-elements
Published
2024-12-20
Title
Shortcodes and extra features for Phlox theme < 2.17.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes