WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fotomoto
Published
2023-10-17
Title
Fotomoto <= 1.2.8 - Reflected XSS
Slug
foton-core
Published
2026-08-11
Title
Foton Core <= 1.1.1 - Unauthenticated Local File Inclusion
Slug
foundation-columns
Published
2025-01-14
Title
Foundation Columns <= 0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
foursquare-checkins
Published
2014-08-01
Title
foursquare-checkins - CSRF
Slug
fox-lms
Published
2025-12-15
Title
Fox LMS 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'
Slug
fox-lms
Published
2026-02-07
Title
Fox LMS < 1.0.6.4 - Authenticated (Contributor+) SQL Injection
Slug
foxtool
Published
2025-12-11
Title
Foxtool All-in-One: Contact chat button, Custom login, Media optimize images < 2.5.3 - Cross-Site Request Forgery to Google OAuth Connection
Slug
foxypress
Published
2014-08-01
Title
Foxypress 0.4.1.1-0.4.2.1 - Arbitrary File Upload
Slug
foxypress
Published
2014-08-01
Title
FoxyPress 0.4.2.5-0.4.2.8 - Multiple Vulnerabilities
Slug
foxyshop
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
foxyshop
Published
2022-06-16
Title
FoxyShop < 4.8.2 - Reflected Cross-Site Scripting
Slug
foyer
Published
2023-11-07
Title
Foyer <= 1.7.5 - Content Injection via Improper Access Control
Slug
fp-rss-category-excluder
Published
2025-01-16
Title
FP RSS Category Excluder <= 1.0.0 - Reflected Cross-Site Scripting
Slug
fpw-category-thumbnails
Published
2025-04-03
Title
FPW Category Thumbnails <= 1.9.5 - Missing Authorization
Slug
fpw-category-thumbnails
Published
2026-06-01
Title
FPW Category Thumbnails <= 1.9.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'id' Parameter
Slug
fraudlabs-pro-for-woocommerce
Published
2025-04-09
Title
FraudLabs Pro for WooCommerce < 2.22.9 - Stored XSS via CSRF
Slug
fraudlabs-pro-for-woocommerce
Published
2025-06-05
Title
FraudLabs Pro for WooCommerce < 2.22.12 - Missing Authorization
Slug
fraudlabs-pro-sms-verification
Published
2024-11-01
Title
FraudLabs Pro SMS Verification < 1.10.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
free-comments-for-wordpress-vuukle
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Slug
free-counter
Published
2015-05-25
Title
Free Counter 1.1 - Cross-Site Scripting (XSS)
Slug
free-download-manager
Published
2024-10-15
Title
FREE DOWNLOAD MANAGER <= 1.0.0 - Unauthenticated Arbitrary File Download
Slug
free-downloads-edd
Published
2025-06-27
Title
Free Downloads EDD <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
free-event-banner
Published
2021-04-10
Title
Event Banner <= 1.3 - Arbitrary File Upload to RCE
Slug
free-facebook-reviews-and-recommendations-widgets
Published
2023-11-22
Title
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Slug
free-gifts-for-woocommerce
Published
2026-07-08
Title
Free Gifts for WooCommerce < 13.3.0 - Unauthenticated Stored Cross-Site Scripting