WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
audiotube
Published
2025-11-20
Title
AudioTube <= 0.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
augmented-reality
Published
2020-11-05
Title
Augmented Reality <= 1.2.0 - Unauthenticated PHP File Upload leading to RCE
Slug
aumenu
Published
2025-03-20
Title
AuMenu <= 1.1.5 - Reflected Cross-Site Scripting
Slug
auphonic-importer
Published
2025-01-16
Title
Auphonic Importer <= 1.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
auros-core
Published
2026-06-26
Title
Auros Core <= 5.3.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
auth0
Published
2020-01-31
Title
Auth0 < 3.11.3 - Unauthenticated Reflected XSS via wle Parameter
Slug
auth0
Published
2020-04-01
Title
Login by Auth0 < 4.0.0 - Multiple Vulnerabilities
Slug
auth0
Published
2024-07-09
Title
Login by Auth0 < 4.6.1 - Reflected Cross-Site Scripting via wle
Slug
authentication-and-xmlrpc-log-writer
Published
2025-08-13
Title
Authentication and xmlrpc log writer <= 1.2.2 - Reflected Cross-Site Scripting
Slug
authentication-via-otp-using-firebase
Published
2024-12-11
Title
Firebase OTP Authentication <= 1.0.1 - Missing Authorization to Privilege Escalation
Slug
authenticator
Published
2022-12-09
Title
Authenticator < 1.3.1 - Subscriber+ Denial of Service via Feed Token Disclosure
Slug
authldap
Published
2023-09-01
Title
authLdap < 2.6.2 - Admin+ Stored XSS
Slug
authldap
Published
2023-09-01
Title
authLdap < 2.5.9 - Settings Update via CSRF
Slug
authnet-cim-for-woo
Published
2025-12-30
Title
Payment Gateway Authorize.Net CIM for WooCommerce <= 2.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
author-avatars
Published
2023-12-06
Title
Author Avatars List/Block < 2.1.19 - Contributor+ Stored XSS
Slug
author-avatars
Published
2024-09-30
Title
Author Avatars List/Block < 2.1.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
author-avatars
Published
2025-01-07
Title
Author Avatars List/Block < 2.1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
author-avatars
Published
2026-02-23
Title
Author Avatars List/Block <= 2.1.25 - Missing Authorization
Slug
author-bio-box
Published
2021-10-14
Title
Author Bio Box < 3.4.0 - Admin+ Stored Cross-Site Scripting
Slug
author-bio-shortcode
Published
2025-04-01
Title
Author Bio Shortcode <= 2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
author-box-after-posts
Published
2025-04-25
Title
Author Box After Posts <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
author-box-for-divi
Published
2026-07-08
Title
Author Box WP Lens < 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
author-box-with-different-description
Published
2025-04-25
Title
Author Box Plugin With Different Description <= 1.3.5 - Cross-Site Request Forgery
Slug
author-chat
Published
2019-06-26
Title
Author Chat < 2.0.0 - SQL Injection
Slug
author-discussion
Published
2024-10-18
Title
Author Discussion <= 0.2.2 - Authenticated (Subscriber+) SQL Injection