WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery 1.9.0 & 2.0.0 - Multiple Vulnerabilities
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery < 1.76 - Reflected Cross-Site Scripting via wp-admin/admin.php skin parameter
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery < 1.67 - Reflected Cross-Site Scripting
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery 0.55 - lib/hitcounter.php pid Parameter SQL Injection
Slug
flash-album-gallery
Published
2014-08-01
Title
GRAND Flash Album Gallery 0.55 - admin/news.php want2Read Parameter Traversal Arbitrary File Access
Slug
flash-album-gallery
Published
2014-10-30
Title
Flagallery Photo Portfolio < 4.25 - Full Path Disclosure
Slug
flash-album-gallery
Published
2021-11-12
Title
GRAND FlaGallery <= 6.1.2 - Admin+ Stored Cross-Site Scripting
Slug
flash-photo-gallery
Published
2014-04-25
Title
Flash Photo Gallery <= 0.7 - XSS
Slug
flash-player-widget
Published
2014-08-01
Title
Flash Player Widget - dewplayer.swf Content Spoofing
Slug
flash-show-and-hide-box
Published
2024-11-01
Title
Flash Show And Hide Box <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
flash-video-player
Published
2024-04-15
Title
Flash Video Player <= 5.0.4 - Cross-Site Request Forgery
Slug
flashcard
Published
2026-01-06
Title
Flashcard Plugin for WordPress <= 0.9 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal
Slug
flashcounter
Published
2025-01-27
Title
FlashCounter <= 1.1.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
flashfader
Published
2025-02-21
Title
Flashfader <= 1.1.1 - Reflected Cross-Site Scripting
Slug
flashnews-fading-effect-pearlbells
Published
2024-12-14
Title
Flash News / Post (Responsive) <= 4.1 - Cross-Site Request Forgery to Privilege Escalation
Slug
flask-micro
Published
2026-02-10
Title
IDE Micro code-editor <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute
Slug
flat-preloader
Published
2021-09-28
Title
Flat Preloader < 1.5.5 - Admin+ Stored Cross-Site Scripting
Slug
flat-preloader
Published
2021-09-28
Title
Flat Preloader < 1.5.4 - CSRF to Stored Cross-Site Scripting
Slug
flat-shipping-rate-by-city-for-woocommerce
Published
2026-01-13
Title
Shipping Rates by City for WooCommerce <= 1.0.3 - Authenticated (Shop Manager+) SQL Injection via 'cities' Parameter
Slug
flat-ui-button
Published
2024-10-17
Title
Flat UI Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via flatbtn Shortcode
Slug
flatpm-wp
Published
2022-11-17
Title
Flat PM < 3.0.13 - Reflected Cross-Site Scripting
Slug
flatpm-wp
Published
2024-03-25
Title
FlatPM < 3.1.05 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
flatpm-wp
Published
2026-01-20
Title
FlatPM – Ad Manager, AdSense and Custom Code < 3.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Post Meta
Slug
flatsome
Published
2025-09-04
Title
Flatsome < 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
flattr
Published
2024-05-02
Title
Flattr <= 1.2.2 - Admin+ Stored XSS