WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
facebook-likebox-widget-and-shortcode
Published
2024-02-27
Title
Profile Box Shortcode And Widget < 1.2.1 - Admin+ Stored XSS
Slug
facebook-members
Published
2014-08-01
Title
facebook-members 5.0.4 - Setting Manipulation CSRF
Slug
facebook-messenger-customer-chat
Published
2019-06-18
Title
The Official Facebook Chat Plugin < 1.3 - CSRF
Slug
facebook-messenger-customer-chat
Published
2020-08-04
Title
The Official WordPress Facebook Chat Plugin < 1.6 - Authenticated Options Change to Chat Takeover
Slug
facebook-opengraph-meta-plugin
Published
2014-08-01
Title
Facebook Opengraph Meta <= 1.0 - SQL Injection
Slug
facebook-page-feed-graph-api
Published
2022-12-27
Title
Mongoose Page Plugin < 1.9.0 - Contributor+ Stored XSS via Shortcode
Slug
facebook-page-photo-gallery
Published
2015-05-06
Title
Facebook Page Photo Gallery <= 2.0.9 - DOM Cross-Site Scripting (XSS)
Slug
facebook-pagelike-widget
Published
2024-02-21
Title
Widget for Social Page Feeds < 6.4 - Admin+ Stored XSS
Slug
facebook-pagelike-widget
Published
2025-03-25
Title
Widget for Social Page Feeds < 6.4.2 - Admin+ Stored XSS
Slug
facebook-photo-fetcher
Published
2025-12-08
Title
Social Photo Fetcher <= 3.0.4 - Cross-Site Request Forgery
Slug
facebook-secret-meta
Published
2025-03-24
Title
Secret Meta <= 1.2.1 - Reflected Cross-Site Scripting
Slug
facebook-wall-and-social-integration
Published
2022-01-12
Title
Mitsol Social Post Feed < 1.11 - Admin+ Stored Cross-Site Scripting
Slug
facilita-form-tracker
Published
2025-02-03
Title
Facilita Form Tracker <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
facturante
Published
2025-05-16
Title
Facturante < 1.13 - Unauthenticated SQL Injection
Slug
faculty-weekly-schedule
Published
2022-03-01
Title
Folders Disclosure via Outdated jQueryFileTree Library
Slug
fade-slider
Published
2025-07-14
Title
Fade Slider <= 2.5 - Reflected Cross-Site Scripting
Slug
falang
Published
2021-10-25
Title
Falang multilanguage for WordPress < 1.3.18 - Reflected Cross-Site Scripting
Slug
falang
Published
2023-07-17
Title
Falang multilanguage < 1.3.40 - Cross-Site Request Forgery
Slug
falang
Published
2024-03-28
Title
Falang multilanguage < 1.3.48 - Authenticated (Administrator+) SQL Injection
Slug
falang
Published
2024-05-10
Title
Falang multilanguage for WordPress < 1.3.50 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
falang
Published
2024-06-21
Title
Falang multilanguage < 1.3.52 - Cross-Site Request Forgery
Slug
falang
Published
2024-08-07
Title
Falang multilanguage for WordPress < 1.3.53 - Missing Authorization to Translation Update and Information Exposure
Slug
falang
Published
2025-05-19
Title
Falang multilanguage < 1.3.62 - Cross-Site Request Forgery
Slug
falang
Published
2025-09-16
Title
Falang multilanguage < 1.3.66 - Unauthenticated PHP Object Injection
Slug
falcon
Published
2024-12-11
Title
Falcon – WordPress Optimizations & Tweaks < 2.8.4 - Missing Authorization