WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fraudlabs-pro-for-woocommerce
Published
2025-06-05
Title
FraudLabs Pro for WooCommerce < 2.22.12 - Missing Authorization
Slug
fraudlabs-pro-sms-verification
Published
2024-11-01
Title
FraudLabs Pro SMS Verification < 1.10.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
free-comments-for-wordpress-vuukle
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Slug
free-counter
Published
2015-05-25
Title
Free Counter 1.1 - Cross-Site Scripting (XSS)
Slug
free-download-manager
Published
2024-10-15
Title
FREE DOWNLOAD MANAGER <= 1.0.0 - Unauthenticated Arbitrary File Download
Slug
free-downloads-edd
Published
2025-06-27
Title
Free Downloads EDD <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
free-event-banner
Published
2021-04-10
Title
Event Banner <= 1.3 - Arbitrary File Upload to RCE
Slug
free-facebook-reviews-and-recommendations-widgets
Published
2023-11-22
Title
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Slug
free-google-fonts
Published
2023-05-30
Title
Google Fonts For WordPress < 3.0.1 - Reflected XSS
Slug
free-product-sample
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
free-product-sample
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
free-product-table-for-woocommerce
Published
2025-04-02
Title
Free Woocommerce Product Table View <= 1.78 - Missing Authorization to Arbitrary Content Deletion
Slug
free-product-table-for-woocommerce
Published
2025-04-01
Title
Free Woocommerce Product Table View <= 1.78 - Missing Authorization
Slug
free-quotation
Published
2025-11-03
Title
Free Quotation <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
free-sales-funnel-squeeze-pages-landing-page-builder-templates-make
Published
2020-04-07
Title
WP Lead Plus X < 0.99 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
free-sales-funnel-squeeze-pages-landing-page-builder-templates-make
Published
2020-04-07
Title
WP Lead Plus X < 0.99 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
free-sales-funnel-squeeze-pages-landing-page-builder-templates-make
Published
2020-04-07
Title
WP Lead Plus X <= 0.99 - Multiple Cross-Site Request Forgery (CSRF)
Slug
free-shipping-label
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
free-stock-photos-foter
Published
2024-10-14
Title
Free Stock Photos Foter <= 1.5.4 - Authenticated (Subscriber+) PHP Object Injection
Slug
free-wp-booster-by-ads-pro
Published
2024-11-15
Title
Ads Booster by Ads Pro <= 1.12 - Unauthenticated Local File Inclusion
Slug
free-wp-mail-smtp
Published
2025-06-05
Title
Free WP Mail SMTP <= 1.0 - Cross-Site Request Forgery
Slug
freemage
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
freemage
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
freemage
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
freemind-wp-browser
Published
2022-07-05
Title
FreeMind WP Browser <= 1.2 - Stored Cross-Site Scripting via CSRF