WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fitvids-for-wordpress
Published
2025-12-04
Title
FitVids for WordPress <= 4.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
five-minute-webshop
Published
2022-05-11
Title
Five Minute Webshop <= 1.3.2 - Admin+ SQLi via orderby
Slug
five-minute-webshop
Published
2022-05-09
Title
Five Minute Webshop <= 1.3.2 - Admin+ SQLi via id
Slug
five-star-ratings-shortcode
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
five-star-ratings-shortcode
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
five9
Published
2025-11-10
Title
Five9 Live Chat <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fiverr-official-search-box
Published
2025-03-24
Title
Fiverr.com Official Search Box <= 1.0.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
fix-multiple-redirects
Published
2025-10-08
Title
Fix Multiple Redirects <= 1.2.3 - Reflected Cross-Site Scripting
Slug
fix-my-feed-rss-repair
Published
2023-12-05
Title
Fix My Feed RSS Repair <= 1.4 - Cross-Site Request Forgery
Slug
fix-rss-feed
Published
2025-03-24
Title
Fix Rss Feeds <= 3.1 - Cross-Site Request Forgery
Slug
fixed-html-toolbar
Published
2024-04-15
Title
Fixed HTML Toolbar < 1.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
fixed-ip-logins
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
fl3r-accessibility-suite
Published
2025-06-26
Title
FL3R Accessibility Suite <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via fl3raccessibilitysuite Shortcode
Slug
fl3r-feelbox
Published
2023-01-04
Title
FL3R FeelBox <= 8.1 - Moods Reset via CSRF
Slug
fl3r-feelbox
Published
2023-01-04
Title
FL3R FeelBox <= 8.1 - Settings Update via CSRF to Stored XSS
Slug
fl3r-feelbox
Published
2023-01-20
Title
FL3R FeelBox <= 8.1 - Unauthenticated SQLi
Slug
flagallery-skins
Published
2014-08-01
Title
GRAND FlAGallery Skins - compact_music_player/gallery.php playlist Parameter SQL Injection
Slug
flagged-content
Published
2025-02-21
Title
Flagged Content <= 1.0.2 - Reflected Cross-Site Scripting
Slug
flags-widget
Published
2025-04-09
Title
Flags Widget <= 1.0.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
flaming-forms
Published
2024-08-12
Title
Flaming Forms <= 1.0.1 - Unauthenticated Stored XSS
Slug
flaming-forms
Published
2024-08-12
Title
Flaming Forms <= 1.0.1 - Reflected XSS
Slug
flaming-forms
Published
2024-12-12
Title
Flaming Forms <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
flaming-password-reset
Published
2025-12-29
Title
Flaming Password Reset <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting
Slug
flamingo
Published
2020-01-15
Title
Flamingo < 2.1.1 - CSV Injection
Slug
flamix-bitrix24-and-contact-forms-7-integrations
Published
2024-08-20
Title
Flamix: Bitrix24 and Contact Form 7 integrations < 3.2.0 - Unauthenticated Full Path Disclosure