WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
examapp
Published
2017-07-21
Title
WordPress Plugin IBPS Online Exam <= 1.0 - Authenticated SQL Injection / Cross-Site Scripting
Slug
excel-like-price-change-for-woocommerce-and-wp-e-commerce-light
Published
2025-04-21
Title
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Local File Inclusion
Slug
excel-like-price-change-for-woocommerce-and-wp-e-commerce-light
Published
2025-05-21
Title
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Remote Code Execution
Slug
excel-like-price-change-for-woocommerce-and-wp-e-commerce-light
Published
2025-05-20
Title
Spreadsheet Price Changer for WooCommerce and WP E-commerce <= 2.4.37 - Unauthenticated Privilege Escalation
Slug
excel-like-price-change-for-woocommerce-and-wp-e-commerce-light
Published
2025-05-30
Title
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Arbitrary File Download
Slug
excel-like-price-change-for-woocommerce-and-wp-e-commerce-light
Published
2025-06-03
Title
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated SQL Injection
Slug
excel-like-price-change-for-woocommerce-and-wp-e-commerce-light
Published
2026-07-28
Title
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Missing Authorization to Unauthenticated Privilege Escalation via Admin Account Creation
Slug
exchange-addon-2checkout
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-authorize-net
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-custom-url-tracking
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-easy-canadian-sales-taxes
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-easy-ue-vat-taxes
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-easy-us-sales-taxes
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-invoices
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-manual-purchases
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-membership
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-paypal-pro
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-stripe
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-addon-table-rate-shipping
Published
2015-04-20
Title
Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()
Slug
exchange-rates
Published
2025-03-27
Title
Exchange Rates < 1.2.3 - Missing Authorization
Slug
exchange-rates
Published
2025-09-03
Title
Exchange Rates < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
exchange-rates-widget
Published
2024-03-25
Title
Exchange Rates Widget < 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
exclusive-addons-for-elementor
Published
2023-01-27
Title
Exclusive Addons Elementor < 2.6.2 - Arbitrary Uninstall Reason Feedback via CSRF
Slug
exclusive-addons-for-elementor
Published
2024-01-26
Title
Exclusive Addons for Elementor < 2.6.9 - Contributor+ Stored XSS
Slug
exclusive-addons-for-elementor
Published
2024-01-26
Title
Exclusive Addons for Elementor < 2.6.9 - Contributor+ Stored XSS