WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
flo-forms
Published
2023-06-15
Title
Flo Forms < 1.0.41 - Admin+ Stored XSS
Slug
flo-forms
Published
2023-11-09
Title
Flo Forms < 1.0.42 - Subscriber+ Test Email Sending
Slug
flo-forms
Published
2024-05-10
Title
Flo Forms < 1.0.43 - Missing Authorization
Slug
flo-forms
Published
2025-04-07
Title
Flo Forms <= 1.0.43 - Missing Authorization
Slug
flo-forms
Published
2025-11-20
Title
Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload
Slug
flo-launch
Published
2022-03-29
Title
Flo Launch < 2.4.1 - Missing Authentication Allow Full Site Takeover
Slug
float-block
Published
2024-12-06
Title
Float Block <= 1.9 - Admin+ Stored XSS via Widget
Slug
float-gateway
Published
2026-01-13
Title
Float Payment Gateway < 1.1.10 - Improper Authorization to Unauthenticated Order Status Manipulation
Slug
float-menu
Published
2022-01-24
Title
Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF
Slug
float-menu
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
float-menu
Published
2023-06-19
Title
Float menu < 5.0.3 - Admin+ Stored Cross-Site Scripting
Slug
float-menu
Published
2024-04-11
Title
Float menu < 6.0.1 - Menu Deletion via CSRF
Slug
float-menu
Published
2025-03-27
Title
Float menu < 6.1.3 - Cross-Site Request Forgery to Settings Update
Slug
float-to-top-button
Published
2022-08-23
Title
Float to Top Button <= 2.3.6 - Admin+ Stored Cross-Site Scripting
Slug
floatbox-plus
Published
2025-01-16
Title
Floatbox Plus <= 1.4.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
floating-action-button
Published
2023-11-20
Title
Floating Action Button < 1.2.2 - Cross-Site Request Forgery
Slug
floating-action-buttons
Published
2024-12-30
Title
Floating Action Buttons < 1.0.1 - Missing Authorization
Slug
floating-awesome-button
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
floating-awesome-button
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
floating-button
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
floating-button
Published
2023-12-28
Title
Floating Button < 6.0.1 - Cross-Site Request Forgery via process_bulk_action
Slug
floating-cart-xforwc
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
floating-contact
Published
2024-08-20
Title
Floating Contact Button < 2.8 - Admin+ Stored XSS
Slug
floating-div
Published
2022-07-29
Title
Floating Div <= 3.0 - Author+ Stored Cross-Site Scripting
Slug
floating-links
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius