WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
float-block
Published
2024-12-06
Title
Float Block <= 1.9 - Admin+ Stored XSS via Widget
Slug
float-gateway
Published
2026-01-13
Title
Float Payment Gateway < 1.1.10 - Improper Authorization to Unauthenticated Order Status Manipulation
Slug
float-menu
Published
2022-01-24
Title
Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF
Slug
float-menu
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
float-menu
Published
2023-06-19
Title
Float menu < 5.0.3 - Admin+ Stored Cross-Site Scripting
Slug
float-menu
Published
2024-04-11
Title
Float menu < 6.0.1 - Menu Deletion via CSRF
Slug
float-menu
Published
2025-03-27
Title
Float menu < 6.1.3 - Cross-Site Request Forgery to Settings Update
Slug
float-to-top-button
Published
2022-08-23
Title
Float to Top Button <= 2.3.6 - Admin+ Stored Cross-Site Scripting
Slug
floatbox-plus
Published
2025-01-16
Title
Floatbox Plus <= 1.4.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
floating-action-button
Published
2023-11-20
Title
Floating Action Button < 1.2.2 - Cross-Site Request Forgery
Slug
floating-action-buttons
Published
2024-12-30
Title
Floating Action Buttons < 1.0.1 - Missing Authorization
Slug
floating-awesome-button
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
floating-awesome-button
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
floating-button
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
floating-button
Published
2023-12-28
Title
Floating Button < 6.0.1 - Cross-Site Request Forgery via process_bulk_action
Slug
floating-cart-xforwc
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
floating-contact
Published
2024-08-20
Title
Floating Contact Button < 2.8 - Admin+ Stored XSS
Slug
floating-div
Published
2022-07-29
Title
Floating Div <= 3.0 - Author+ Stored Cross-Site Scripting
Slug
floating-links
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
floating-links
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
floating-player
Published
2024-12-12
Title
Floating Video Player <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
floating-social-bar
Published
2015-07-07
Title
Floating Social Bar < 1.1.7 - Cross-Site Scripting (XSS)
Slug
floating-social-bar
Published
2025-04-24
Title
Floating Social Bar <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
floating-social-buttons
Published
2024-06-28
Title
Floating Social Buttons <= 1.5 - Cross-Site Request Forgery
Slug
floating-social-media-icon
Published
2015-08-19
Title
Floating Social Media Icon <= 2.1 - Authenticated Stored Cross-Site Scripting (XSS)