WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fancybox-for-wordpress
Published
2015-02-22
Title
FancyBox for WordPress 3.0.0-3.0.2 - Stored Cross-Site Scripting (XSS)
Slug
fancybox-for-wordpress
Published
2024-04-05
Title
FancyBox for WordPress 3.0.2 - 3.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
fancybox-for-wordpress
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Slug
fancybox-for-wordpress
Published
2025-05-13
Title
FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS
Slug
fancyflickr
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
fancytabs
Published
2025-09-29
Title
FancyTabs <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
Slug
fantastic-elasticsearch
Published
2025-01-10
Title
Fantastic Elasticsearch <= 4.1.0 - Reflected XSS
Slug
fapi-member
Published
2025-12-15
Title
FAPI Member <= 2.2.29 - Unauthenticated Insecure Direct Object Reference
Slug
faq-and-answers
Published
2024-12-11
Title
FAQ And Answers – Create Frequently Asked Questions Area on WP Sites < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
faq-builder-ays
Published
2021-06-29
Title
FAQ Builder < 1.3.6 - Authenticated Blind SQL Injections
Slug
faq-builder-ays
Published
2024-11-27
Title
FAQ Builder AYS < 1.7.2 - Reflected Cross-Site Scripting
Slug
faq-builder-ays
Published
2025-01-24
Title
FAQ Builder AYS < 1.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
faq-builder-ays
Published
2026-03-20
Title
FAQ Builder AYS < 1.8.3 - Unauthenticated Stored Cross-Site Scripting
Slug
faq-builder-ays
Published
2026-08-31
Title
FAQ Builder AYS 1.6.3 - 1.8.4 - Unauthenticated Stored XSS via ays_get_user_information
Slug
faq-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
faq-for-woocommerce
Published
2024-07-08
Title
XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] < 1.7.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
faq-for-woocommerce
Published
2024-07-08
Title
XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] < 1.7.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
faq-for-woocommerce
Published
2024-07-05
Title
XPlainer - WooCommerce Product FAQ < 1.6.4 - Reflected Cross-Site Scripting
Slug
faq-manager-with-structured-data
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
faq-manager-with-structured-data
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
faq-schema-block-to-accordion
Published
2026-01-16
Title
Turn Yoast SEO FAQ Block to Accordion <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
faq-shortcode
Published
2026-05-26
Title
faq shortocde <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute
Slug
faq-wd
Published
2016-04-17
Title
FAQ WD < 1.0.17 - Cross-Site Scripting (XSS)
Slug
faqs
Published
2024-12-17
Title
FAQs <= 1.0.2 - Reflected Cross-Site Scripting
Slug
faqs
Published
2024-12-06
Title
FAQs <= 1.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting