WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
attire-blocks
Published
2025-01-24
Title
Attire Blocks < 1.9.7 - Cross-Site Request Forgery
Slug
attribute-stock-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
attributes-for-blocks
Published
2024-09-03
Title
Attributes for Blocks < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributesForBlocks Parameter
Slug
auction-feed
Published
2025-09-22
Title
Auction Feed <= 1.1.3 - Cross-Site Request Forgery
Slug
auction-nudge
Published
2025-01-24
Title
Auction Nudge – Your eBay on Your Site < 7.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
auctionPlugin
Published
2014-08-01
Title
Sitemile Auctions 2.0.1.3 - wp-content/plugins/auctionPlugin/upload.php File Upload PHP Code Execution
Slug
audier-elementor
Published
2025-12-10
Title
Audier For Elementor <= 1.0.9 - Missing Authorization
Slug
audio-album
Published
2025-03-27
Title
Audio Album < 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
audio-and-video-player
Published
2024-01-29
Title
CP Media Player < 1.2.0 - Player Deletion and Duplication via CSRF
Slug
audio-and-video-player
Published
2026-08-25
Title
CP Media Player – Audio Player and Video Player < 1.3.1 - Unauthenticated Stored Cross-Site Scripting
Slug
audio-comments
Published
2025-05-16
Title
Audio Comments Plugin <= 1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
audio-comparison-lite
Published
2024-10-31
Title
Audio Comparison Lite < 3.5 - Contributor+ Stored XSS
Slug
audio-editor-recorder
Published
2025-06-27
Title
Audio Editor & Recorder < 2.2.4 - Unauthenticated Information Exposure
Slug
audio-editor-recorder
Published
2025-06-06
Title
Audio Editor & Recorder < 2.2.2 - Missing Authorization
Slug
audio-merchant
Published
2023-11-17
Title
Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
audio-merchant
Published
2023-11-17
Title
Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Settings Modifcation and Stored Cross-Site Scripting
Slug
audio-player
Published
2014-08-01
Title
Audio Player - player.swf playerID Parameter XSS
Slug
audio-player-with-playlist-ultimate
Published
2023-09-03
Title
Audio Player with Playlist Ultimate < 1.3 - Contributor+ Stored XSS
Slug
audio-record
Published
2018-12-24
Title
Audio Record 1.0 - Arbitrary File Upload
Slug
audio-text
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
audio-video-download-buttons-for-youtube
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
audio4-html5
Published
2025-05-16
Title
Radio Player Shoutcast & Icecast WordPress Plugin < 4.4.7 - Authenticated (Contributor+) SQL Injection
Slug
audiocase
Published
2024-11-08
Title
audioCase <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
audioigniter
Published
2026-05-21
Title
AudioIgniter Music Player < 2.0.3 - Unauthenticated Insecure Direct Object Reference to 'audioigniter_playlist_id' Parameter
Slug
audiomack
Published
2025-12-31
Title
Audiomack <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting