WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
falling-things
Published
2025-04-04
Title
Falling things < 1.09 - Authenticated (Editor+) SQL Injection
Slug
faltu-testimonial-rotator
Published
2024-11-08
Title
Faltu Testimonial Rotator <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
famethemes-demo-importer
Published
2024-04-26
Title
FameTheme Demo Importer < 1.1.6 - Cross-Site Request Forgery
Slug
fami-sales-popup
Published
2025-02-02
Title
Fami Sales Popup <= 2.0.0 - Unauthenticated Local File Inclusion
Slug
fami-woocommerce-compare
Published
2025-04-04
Title
Fami WooCommerce Compare <= 1.0.5 - Unauthenticated Local File Inclusion
Slug
fan-page
Published
2025-07-28
Title
Fan Page <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Slug
fanbridge-signup
Published
2025-10-23
Title
FanBridge signup <= 0.6 - Cross-Site Request Forgery
Slug
fancier-author-box
Published
2022-11-03
Title
Fancier Author Box by ThematoSoup <= 1.4 - Admin+ Stored XSS
Slug
fancy-box
Published
2025-03-21
Title
FancyBox <= 1.0.1 - Reflected Cross-Site Scripting
Slug
fancy-elementor-flipbox
Published
2024-04-29
Title
Fancy Elementor Flipbox < 2.5.2 - Contributor+ Stored XSs via Fancy Elementor Flipbox Widget
Slug
fancy-facebook-comments
Published
2023-02-13
Title
Fancy Comments WordPress < 1.2.11 - Contributor+ Stored XSS
Slug
fancy-facebook-comments
Published
2023-12-28
Title
Fancy Comments WordPress < 1.2.15 - Contributor+ Stored XSS
Slug
fancy-facebook-comments
Published
2024-03-25
Title
Fancy Comments WordPress < 1.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
fancy-gallery
Published
2024-11-15
Title
Gallery Manager <= 1.6.58 - Reflected Cross-Site Scripting
Slug
fancy-product-designer
Published
2020-11-18
Title
Fancy Product Designer < 4.5.1 - Unauthenticated Stored Cross-Site Scripting
Slug
fancy-product-designer
Published
2021-06-01
Title
Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE
Slug
fancy-product-designer
Published
2022-02-08
Title
Fancy Product Designer < 4.7.5 - Admin+ SQL Injection
Slug
fancy-product-designer
Published
2022-04-14
Title
Fancy Product Designer < 4.7.6 - Arbitrary File Upload via CSRF
Slug
fancy-product-designer
Published
2023-04-05
Title
Fancy Product Designer < 4.7.0 - Subscriber+ Unauthorized Access and Modification
Slug
fancy-product-designer
Published
2023-04-05
Title
Fancy Product Designer < 4.7.0 - Subscriber+ Unauthorized Site Options Modification
Slug
fancy-product-designer
Published
2024-02-20
Title
Fancy Product Designer < 6.1.5 - Admin+ SQL Injection
Slug
fancy-product-designer
Published
2024-03-25
Title
Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting via Product Title
Slug
fancy-product-designer
Published
2024-04-05
Title
Fancy Product Designer < 6.1.8 - Reflected Cross Site Scripting
Slug
fancy-product-designer
Published
2024-04-15
Title
Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting
Slug
fancy-product-designer
Published
2025-01-03
Title
Fancy Product Designer < 6.4.4 - Unauthenticated SQL Injection