WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
foogallery
Published
2025-03-07
Title
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel < 2.4.30 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Title Size
Slug
foogallery
Published
2025-03-07
Title
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel < 2.4.30 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates
Slug
foogallery
Published
2025-07-10
Title
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel < 2.4.32 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
foogallery-captions
Published
2025-01-16
Title
FooGallery Captions <= 1.0.2 - Reflected Cross-Site Scripting
Slug
foogallery-premium
Published
2024-01-02
Title
FooGallery Premium < 2.4.6 - Contributor+ Stored XSS
Slug
foogallery-premium
Published
2024-05-23
Title
FooGallery < 2.4.15 - Author+ Stored XSS
Slug
foogallery-premium
Published
2024-12-09
Title
Best WordPress Gallery Plugin – FooGallery < 2.4.27 - Authenticated (Contributor+) Directory Traversal
Slug
foopeople
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
foopeople
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
football-leagues-by-anwppro
Published
2024-09-23
Title
AnWP Football Leagues < 0.16.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
football-leagues-by-anwppro
Published
2025-08-11
Title
AnWP Football Leagues < 0.16.18 - Authenticated (Administrator+) CSV Injection
Slug
football-pool
Published
2017-12-24
Title
Football Pool < 2.6.5 - Multiple XSS
Slug
football-pool
Published
2024-01-08
Title
Football pool < 2.11.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
football-pool
Published
2024-08-07
Title
Football Pool < 2.11.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
football-pool
Published
2024-08-07
Title
Football Pool < 2.12.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
football-pool
Published
2025-03-26
Title
Football Pool < 2.12.3 - Cross-Site Request Forgery to Settings Update
Slug
football-pool
Published
2025-06-18
Title
Football Pool < 2.12.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
football-pool
Published
2025-06-27
Title
Football Pool < 2.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
football-pool
Published
2025-09-09
Title
Football Pool < 2.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
footer-flyout-widget
Published
2024-11-23
Title
Footer Flyout Widget <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
footer-putter
Published
2023-11-14
Title
Footer Putter <= 6.1.3 - Reflected Cross-Site Scripting
Slug
footer-text
Published
2022-04-28
Title
Footer Text <= 2.0.3 - Stored Cross-Site Scripting via CSRF
Slug
footnotes-for-wordpress
Published
2025-04-01
Title
Footnotes for WordPress <= 2016.1230 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
footnotes-made-easy
Published
2025-11-03
Title
Footnotes Made Easy < 3.0.8 - Unauthenticated Stored Cross-Site Scripting
Slug
for-the-visually-impaired
Published
2023-02-23
Title
For the visually impaired <= 0.58 - Cross-Site Request Forgery (CSRF)