WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
flexo-slider
Published
2025-01-16
Title
Flexo Slider <= 1.0013 - Reflected Cross-Site Scripting
Slug
flexo-social-gallery
Published
2025-08-14
Title
flexo-social-gallery <= 1.0006 - Cross-Site Request Forgery
Slug
flexoslider
Published
2025-06-14
Title
flexoslider <= 1.0004 - Reflected Cross-Site Scripting
Slug
flexytalk-widget
Published
2025-04-09
Title
FrescoChat Live Chat <= 3.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
flickr-gallery
Published
2017-10-02
Title
Flickr Gallery <= 1.5.2 - Unauthenticated PHP Object Injection
Slug
flickr-justified-gallery
Published
2015-07-28
Title
Flickr Justified Gallery < 3.4.0 - Reflected Cross-Site Scripting (XSS)
Slug
flickr-justified-gallery
Published
2023-05-24
Title
Flickr Justified Gallery <= 3.5 - Cross-Site Request Forgery
Slug
flickr-photostream
Published
2025-04-03
Title
Flickr Photostream <= 3.1.8 - Reflected Cross-Site Scripting
Slug
flickr-picture-backup
Published
2017-04-26
Title
flickr-picture-backup <= 0.7 - Unauthenticated File Upload
Slug
flickr-rss
Published
2018-02-06
Title
flickrRSS <= 5.3.1 - XSS and CSRF
Slug
flickr-set-slideshows
Published
2025-03-24
Title
Flickr set slideshows <= 0.9 - Authenticated (Contributor+) SQL Injection
Slug
flickr-set-slideshows
Published
2025-03-27
Title
Flickr set slideshows <= 0.9 - Authenticated (Subscriber+) SQL Injection
Slug
flickr-shortcode-importer
Published
2025-04-24
Title
Flickr Shortcode Importer <= 2.2.3 - Authenticated (Administrator+) PHP Object Injection
Slug
flickr-slideshow-wrapper
Published
2025-02-21
Title
flickr-slideshow-wrapper <= 5.4.6 - Reflected Cross-Site Scripting
Slug
flight-search-widget-blocks
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
flight-search-widget-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
flight-search-widget-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
flightlog
Published
2021-05-19
Title
FlightLog <= 3.0.2 - Authenticated (editor+) SQL Injection
Slug
flip-boxes
Published
2025-04-10
Title
Cool Flipbox – Shortcode & Gutenberg Block < 1.9.0 - Reflected Cross-Site Scripting
Slug
flipbook
Published
2014-08-01
Title
Flip Book 1.0 - Shell Upload
Slug
flipbox-builder
Published
2024-07-26
Title
Flipbox Builder <= 1.5 - Authenticated (Contributor+) PHP Object Injection
Slug
flipdish-ordering-system
Published
2025-03-24
Title
Flipdish Ordering System <= 1.5.2 - Cross-Site Request Forgery to Settings Update
Slug
flipping-cards
Published
2024-09-12
Title
Flipping Cards < 1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
flippingbook
Published
2025-12-28
Title
FlippingBook <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
flo-forms
Published
2021-03-16
Title
Flo Forms < 1.0.36 - Authenticated Options Change to Stored XSS