WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fancy-product-designer
Published
2025-01-03
Title
Fancy Product Designer < 6.4.4 - Unauthenticated Arbitrary File Upload
Slug
fancy-product-designer
Published
2025-12-11
Title
Fancy Product Designer < 6.5.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Slug
fancy-product-designer
Published
2025-12-15
Title
Fancy Product Designer | WooCommerce WordPress < 6.5.0 - Unauthenticated Information Disclosure via 'url' Parameter
Slug
fancy-product-designer
Published
2025-12-15
Title
Fancy Product Designer | WooCommerce WordPress < 6.5.0 - Unauthenticated Server-Side Request Forgery via Race Condition
Slug
fancy-roller-scroller
Published
2024-12-11
Title
Fancy Roller Scroller < 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
fancy-user-listing
Published
2024-11-08
Title
Fancy User List <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fancybox-for-wordpress
Published
2015-02-22
Title
FancyBox for WordPress 3.0.0-3.0.2 - Stored Cross-Site Scripting (XSS)
Slug
fancybox-for-wordpress
Published
2024-04-05
Title
FancyBox for WordPress 3.0.2 - 3.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
fancybox-for-wordpress
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Slug
fancybox-for-wordpress
Published
2025-05-13
Title
FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS
Slug
fancyflickr
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
fancytabs
Published
2025-09-29
Title
FancyTabs <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
Slug
fantastic-elasticsearch
Published
2025-01-10
Title
Fantastic Elasticsearch <= 4.1.0 - Reflected XSS
Slug
fapi-member
Published
2025-12-15
Title
FAPI Member <= 2.2.29 - Unauthenticated Insecure Direct Object Reference
Slug
faq-and-answers
Published
2024-12-11
Title
FAQ And Answers – Create Frequently Asked Questions Area on WP Sites < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
faq-builder-ays
Published
2021-06-29
Title
FAQ Builder < 1.3.6 - Authenticated Blind SQL Injections
Slug
faq-builder-ays
Published
2024-11-27
Title
FAQ Builder AYS < 1.7.2 - Reflected Cross-Site Scripting
Slug
faq-builder-ays
Published
2025-01-24
Title
FAQ Builder AYS < 1.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
faq-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
faq-for-woocommerce
Published
2024-07-08
Title
XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] < 1.7.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
faq-for-woocommerce
Published
2024-07-08
Title
XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] < 1.7.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
faq-for-woocommerce
Published
2024-07-05
Title
XPlainer - WooCommerce Product FAQ < 1.6.4 - Reflected Cross-Site Scripting
Slug
faq-manager-with-structured-data
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
faq-manager-with-structured-data
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
faq-wd
Published
2016-04-17
Title
FAQ WD < 1.0.17 - Cross-Site Scripting (XSS)