WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
awesome-support
Published
2024-02-09
Title
Awesome Support – WordPress HelpDesk & Support Plugin < 6.1.8 - Authenticated (Subscriber+) SQL Injection
Slug
awesome-support
Published
2024-03-12
Title
Awesome Support < 6.1.7 - Insufficient Authorization via wpas_can_delete_attachments()
Slug
awesome-support
Published
2024-03-29
Title
Awesome Support < 6.1.8 - Missing Authorization
Slug
awesome-support
Published
2024-12-11
Title
Awesome Support < 6.3.2 - Missing Authorization
Slug
awesome-support
Published
2025-03-31
Title
Awesome Support – WordPress HelpDesk & Support Plugin < 6.3.2 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
awesome-support
Published
2025-08-14
Title
Awesome Support < 6.3.7 - Information Exposure
Slug
awesome-support
Published
2025-09-22
Title
Awesome Support < 6.3.6 - Authenticated (Support Manager+) PHP Object Injection
Slug
awesome-support
Published
2026-01-15
Title
Awesome Support – WordPress HelpDesk & Support Plugin < 6.3.7 - Missing Authorization to Unauthenticated Role Demotion
Slug
awesome-surveys
Published
2025-03-11
Title
Awesome Surveys <= 2.0.10 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
awesome-testimonials
Published
2025-10-07
Title
Awesome Testimonials <= 2.2.1 - Cross-Site Request Forgery
Slug
awesome-timeline
Published
2025-01-16
Title
Awesome WordPress Timeline Plugin <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
awesome-tool-tip
Published
2024-11-08
Title
Awesome Tool Tip <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
awesome-twitter-feeds
Published
2025-01-16
Title
Awesome Twitter Feeds <= 1.0 - Reflected Cross-Site Scripting
Slug
awesome-weather
Published
2021-06-28
Title
Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting (XSS)
Slug
awesome-weather
Published
2023-09-13
Title
Awesome Weather Widget for WordPress <= 3.0.2 - Contributor+ Stored XSS
Slug
awesome-wp-image-gallery
Published
2025-04-24
Title
Awesome Wp Image Gallery <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
awesome-wp-image-gallery
Published
2025-07-02
Title
prettyPhoto JavaScript Library <= 3.1.6 - Contributor+ Stored XSS
Slug
awesomepress
Published
2024-10-31
Title
AwesomePress <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
awin-advertiser-tracking
Published
2025-05-07
Title
Awin – Advertiser Tracking for WooCommerce < 2.0.1 - Product Feed Generation via CSRF
Slug
awin-data-feed
Published
2022-06-16
Title
Awin Data Feed < 1.8 - Unauthenticated Stored Cross-Site Scripting
Slug
awin-data-feed
Published
2022-06-16
Title
Awin Data Feed < 1.8 - Reflected Cross-Site Scripting
Slug
aws-cdn-by-wpadmin
Published
2023-07-11
Title
WPAdmin AWS CDN < 3.0.0 - Cross-Site Request Forgery
Slug
awsa-shipping
Published
2025-04-10
Title
AWSA Shipping <= 1.3.0 - Reflected Cross-Site Scripting
Slug
awsm-team
Published
2024-07-01
Title
AWSM Team < 1.3.2 - Authenticated (Contributor+) Local File Inclusion
Slug
awsom-news-announcement
Published
2024-05-06
Title
AWSOM News Announcement <= 1.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting