WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
frontpage-category-filter
Published
2025-03-11
Title
Frontpage category filter <= 1.0.2 - Cross-Site Request Forgery
Slug
frontpage-manager
Published
2024-01-16
Title
Frontpage Manager <= 1.3 - Cross-Site Request Forgery via admin_page
Slug
fruitcake-horsemanager
Published
2024-11-08
Title
Horsemanager <= 1.3 - Authenticated (Contributor+) SQL Injection
Slug
fs-poster
Published
2024-06-21
Title
FS Poster < 6.5.9 - Cross-Site Request Forgery
Slug
fs-poster
Published
2025-04-10
Title
FS Poster < 6.5.9 - Reflected Cross-Site Scripting
Slug
fs-poster
Published
2025-02-24
Title
FS Poster < 6.5.9 - Subscriber+ SQL Injection
Slug
fs-poster
Published
2025-04-15
Title
FS Poster < 7.1.8 - Missing Authorization
Slug
fs-product-inquiry
Published
2024-05-14
Title
FS Product Inquiry <= 1.1.1 - Unauthenticated Stored XSS
Slug
fs-product-inquiry
Published
2024-05-14
Title
FS Product Inquiry <= 1.1.1 - Reflected XSS
Slug
fs-real-estate-plugin
Published
2014-08-01
Title
FireStorm Professional Real Estate 2.06.01 - xml/marker_listings.php id Parameter SQL Injection
Slug
fs-real-estate-plugin
Published
2014-08-01
Title
FireStorm Professional Real Estate - Multiple SQL Injection
Slug
fs-real-estate-plugin
Published
2026-01-06
Title
FireStorm Professional Real Estate <= 2.7.11 - Authenticated (Administrator+) SQL Injection
Slug
fs-shopping-cart
Published
2016-11-10
Title
FireStorm Shopping Cart eCommerce Plugin 2.07.02 - Authenticated SQL Injection
Slug
fscf-sms
Published
2017-12-14
Title
Multiple Mediaburst/Clockwork Plugins - Cross-Site Scripting (XSS)
Slug
fsflex-local-fonts
Published
2021-11-15
Title
Flex Local Fonts <= 1.0.0 - Admin+ Stored Cross-Site-Scripting
Slug
ftp-access
Published
2023-08-21
Title
FTP Access <= 1.0 - Subscriber+ Stored XSS
Slug
ftp-sync
Published
2025-03-11
Title
FTP Sync <= 1.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
fudou
Published
2021-06-22
Title
Fudousan < 5.7.2 - Authenticated Cross-Site Scripting (XSS)
Slug
full-circle
Published
2025-01-27
Title
Full Circle <= 0.5.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
full-customer
Published
2023-08-08
Title
FULL - Customer < 2.3 - Subscriber+ Arbitrary Plugin Installation
Slug
full-customer
Published
2023-08-08
Title
FULL - Customer < 2.3 - Subscriber+ Health Check Disclosure
Slug
full-customer
Published
2024-07-10
Title
FULL < 3.1.13 - Unauthenticated Stored Cross-Site Scripting via License Plan Parameter
Slug
full-customer
Published
2024-10-10
Title
FULL – Cliente < 3.1.23 - Reflected Cross-Site Scripting
Slug
full-customer
Published
2024-12-11
Title
FULL Customer < 3.1.26 - Authenticated (Contributor+) Local File Inclusion
Slug
full-customer
Published
2025-05-01
Title
FULL – Cliente 3.1.5 - 3.1.25 - Authenticated (Subscriber+) SQL Injection