WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
flatty-flat-admin-theme
Published
2025-03-28
Title
Flatty <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
fleet
Published
2025-11-10
Title
Fleet Manager < 2.6.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
fleetwire-fleet-management
Published
2025-07-22
Title
Fleetwire Fleet Management Plugin < 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via fleetwire_list Shortcode
Slug
flex-guten
Published
2025-08-05
Title
Flex Guten < 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via thumbnailHoverEffect Parameter
Slug
flex-qr-code-generator
Published
2025-10-14
Title
Flex QR Code Generator < 1.2.6 - Unauthenticated Arbitrary File Upload
Slug
flex-qr-code-generator
Published
2025-12-05
Title
Flex QR Code Generator < 1.2.8 - Unauthenticated Arbitrary File Upload
Slug
flex-qr-code-generator
Published
2026-01-12
Title
Flex QR Code Generator <= 1.2.10 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
flex-store-user
Published
2025-12-19
Title
Flex Store Users <= 1.1.0 - Unauthenticated Privilege Escalation
Slug
flexi
Published
2022-02-16
Title
Flexi - Guest Submit < 4.20 - Reflected Cross-Site Scripting
Slug
flexi
Published
2025-04-09
Title
Flexi – Guest Submit <= 4.28 - Unauthenticated Local File Inclusion
Slug
flexi
Published
2025-10-02
Title
Flexi <= 4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode
Slug
flexi-product-slider-grid
Published
2026-02-13
Title
Flexi Product Slider and Grid for WooCommerce <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion via 'theme' Shortcode Attribute
Slug
flexi-quote-rotator
Published
2014-08-01
Title
Flexi Quote Rotator - Cross-Site Request Forgery & SQL Injection Vulnerabilities
Slug
flexi-quote-rotator
Published
2022-07-06
Title
Flexi Quote Rotator <= 0.9.4 - Admin+ Stored Cross-Site Scripting
Slug
flexible-blogtitle
Published
2025-01-16
Title
Flexible Blogtitle <= 0.1 - Reflected Cross-Site Scripting
Slug
flexible-captcha
Published
2023-01-11
Title
Flexible Captcha <= 4.1 - Contributor+ Stored XSS
Slug
flexible-checkout-fields
Published
2020-02-25
Title
Flexible Checkout Fields for WooCommerce < 2.3.2 - Unauthenticated Settings Update
Slug
flexible-checkout-fields
Published
2024-04-05
Title
Flexible Checkout Fields for WooCommerce < 4.1.3 - Missing Authorization
Slug
flexible-cookies
Published
2025-03-27
Title
Flexible Cookies < 1.1.9 - Cross-Site Request Forgery
Slug
flexible-coupons
Published
2025-01-15
Title
Flexible PDF Coupons < 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
flexible-custom-post-type
Published
2011-11-17
Title
Flexible Custom Post Type < 0.1.7 - XSS
Slug
flexible-faq
Published
2025-09-22
Title
Flexible FAQ <= 0.2 - Cross-Site Request Forgery
Slug
flexible-faqs
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
flexible-faqs
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
flexible-invoices
Published
2025-09-22
Title
Flexible PDF Invoices for WooCommerce & WordPress < 6.0.14 - Cross-Site Request Forgery