WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
file-provider
Published
2025-05-14
Title
File Provider <= 1.2.3 - Unauthenticated SQLi
Slug
file-provider
Published
2025-05-14
Title
File Provider <= 1.2.3 - Item Deletion via CSRF
Slug
file-renaming-on-upload
Published
2023-05-25
Title
File Renaming on Upload < 2.5.2 - Admin+ Stored Cross-Site Scripting
Slug
file-select-control-for-elementor
Published
2024-11-08
Title
File Select Control For Elementor <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
file-upload-types
Published
2024-10-24
Title
File Upload Types by WPForms < 1.5.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
file-uploader-for-woocommerce
Published
2025-12-19
Title
File Uploader for WooCommerce < 1.0.4 - Unauthenticated Arbitrary File Upload via add-image-data
Slug
file-uploader-for-woocommerce
Published
2026-03-23
Title
File Uploader for WooCommerce <= 1.0.4 - Unauthenticated Path Traversal
Slug
filebird
Published
2021-06-16
Title
Filebird 4.7.3 - Unauthenticated SQL Injection
Slug
filebird
Published
2024-01-19
Title
FileBird < 5.6.1 - Admin+ Stored XSS
Slug
filebird
Published
2024-04-16
Title
FileBird < 5.6.4 - Author+ Stored XSS
Slug
filebird
Published
2024-04-16
Title
FileBird < 5.6.4 - Author+ Users Folder Deletion
Slug
filebird
Published
2024-12-02
Title
Filebird < 6.3.4 - Missing Authorization
Slug
filebird
Published
2025-02-23
Title
Filebird < 6.4.6 - Authenticated (Author+) Insecure Direct Object Reference
Slug
filebird
Published
2025-08-05
Title
FileBird – WordPress Media Library Folders & File Manager < 6.4.9 - Authenticated (Author+) SQL Injection
Slug
filebird
Published
2025-10-17
Title
FileBird < 6.5.0 - Author+ Settings Reset
Slug
filebird
Published
2025-12-15
Title
FileBird – WordPress Media Library Folders & File Manager < 6.5.2 - Missing Authorization to Authenticated (Author+) Global Folders Tampering
Slug
filebird-document-library
Published
2024-07-04
Title
FileBird Document Library < 2.0.8 - Unauthenticated Sensitive Information Exposure
Slug
filebird-pro
Published
2025-10-25
Title
FileBird Pro < 6.5.2 - Missing Authorization
Slug
filedownload
Published
2014-08-01
Title
Filedownload 0.1 - (download.php) Remote File Disclosure
Slug
filedownload
Published
2015-07-11
Title
FileDownload <= 1.4 - Multiple Issues
Slug
fileorganizer
Published
2023-09-03
Title
FileOrganizer < 1.0.3 - Admin+ Arbitrary File Access
Slug
fileorganizer
Published
2024-04-23
Title
FileOrganizer and FileOrganizer Pro < 1.0.7 - Authenticated Stored Cross-Site Scripting
Slug
fileorganizer
Published
2024-06-06
Title
FileOrganizer < 1.0.8 - Sensitive Information Exposure via Directory Listing
Slug
fileorganizer
Published
2024-10-29
Title
FileOrganizer < 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
fileorganizer
Published
2024-12-06
Title
FileOrganizer < 1.1.5 - Authenticated (Administrator+) Local JavaScript File Inclusion