WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
forum-server
Published
2025-06-27
Title
WP Forum Server <= 1.8.2 - Cross-Site Request Forgery
Slug
forum-server
Published
2025-06-27
Title
WP Forum Server <= 1.8.2 - Authenticated (Administrator+) SQL Injection
Slug
forumconverter
Published
2014-08-01
Title
ForumConverter - SQL Injection
Slug
forumwp
Published
2024-09-06
Title
ForumWP – Forum & Discussion Board Plugin < 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Slug
forumwp
Published
2024-12-05
Title
ForumWP < 2.1.3 - Reflected Cross-Site Scripting
Slug
forumwp
Published
2024-12-05
Title
ForumWP < 2.1.3 - Reflected Cross-Site Scripting via url Parameter
Slug
forumwp
Published
2024-12-11
Title
ForumWP < 2.1.1 - Unauthenticated PHP Object Injection
Slug
forumwp
Published
2025-11-21
Title
ForumWP < 2.1.5 - Missing Authorization
Slug
forumwp
Published
2026-01-05
Title
ForumWP – Forum & Discussion Board < 2.1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name
Slug
forym
Published
2022-09-27
Title
Forym <= 1.5.8 - Reflected Cross-Site Scripting
Slug
fossura-tag-miner
Published
2015-08-18
Title
Tag Miner < 1.1.5 - Cross-Site Request Forgery (CSRF) & XSS
Slug
fotobook
Published
2022-01-31
Title
Fotobook <= 3.2.3 - Reflected Cross-Site Scripting
Slug
fotomoto
Published
2023-10-17
Title
Fotomoto <= 1.2.8 - Reflected XSS
Slug
foundation-columns
Published
2025-01-14
Title
Foundation Columns <= 0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
foursquare-checkins
Published
2014-08-01
Title
foursquare-checkins - CSRF
Slug
fox-lms
Published
2025-12-15
Title
Fox LMS 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'
Slug
foxtool
Published
2025-12-11
Title
Foxtool All-in-One: Contact chat button, Custom login, Media optimize images < 2.5.3 - Cross-Site Request Forgery to Google OAuth Connection
Slug
foxypress
Published
2014-08-01
Title
Foxypress 0.4.1.1-0.4.2.1 - Arbitrary File Upload
Slug
foxypress
Published
2014-08-01
Title
FoxyPress 0.4.2.5-0.4.2.8 - Multiple Vulnerabilities
Slug
foxyshop
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
foxyshop
Published
2022-06-16
Title
FoxyShop < 4.8.2 - Reflected Cross-Site Scripting
Slug
foyer
Published
2023-11-07
Title
Foyer <= 1.7.5 - Content Injection via Improper Access Control
Slug
fp-rss-category-excluder
Published
2025-01-16
Title
FP RSS Category Excluder <= 1.0.0 - Reflected Cross-Site Scripting
Slug
fpw-category-thumbnails
Published
2025-04-03
Title
FPW Category Thumbnails <= 1.9.5 - Missing Authorization
Slug
fraudlabs-pro-for-woocommerce
Published
2025-04-09
Title
FraudLabs Pro for WooCommerce < 2.22.9 - Stored XSS via CSRF