WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fusion-builder
Published
2025-10-03
Title
Fusion Builder < 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fusion-engage
Published
2015-04-10
Title
Fusion Engage 1.0.5 - Local File Disclosure
Slug
fusion-extension-gallery
Published
2025-09-22
Title
Fusion Page Builder : Extension - Gallery < 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fusion-slider
Published
2024-06-18
Title
Universal Slider <= 1.6.5 - Authenticated (Contributor+) PHP Object Injection
Slug
fusionspan-impexium-single-sign-on
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
fusionspan-impexium-single-sign-on
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
futurio-extra
Published
2022-01-04
Title
Futurio Extra < 1.6.3 - Authenticated SQL Injection
Slug
futurio-extra
Published
2022-01-14
Title
Futurio Extra < 1.6.3 - Subscriber+ User Email Address Disclosure
Slug
futurio-extra
Published
2023-08-11
Title
Futurio Extra < 1.9.1 - Arbitrary Plugin Activation via CSRF
Slug
futurio-extra
Published
2024-06-11
Title
Futurio Extra < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Text Block Widget
Slug
futurio-extra
Published
2024-10-24
Title
Futurio Extra < 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
futurio-extra
Published
2024-11-11
Title
Futurio Extra < 2.0.14 - Authenticated (Contributor+) Post Disclosure
Slug
futurio-extra
Published
2024-12-02
Title
Futurio Extra < 2.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_size tag
Slug
fv-all-in-one-seo-pack
Published
2025-12-22
Title
FV Simpler SEO < 1.9.7 - Missing Authorization
Slug
fv-antispam
Published
2025-11-18
Title
FV Antispam < 2.8 - Reflected Cross-Site Scripting
Slug
fv-descriptions
Published
2024-12-17
Title
FV Descriptions <= 1.4 - Reflected Cross-Site Scripting
Slug
fv-wordpress-flowplayer
Published
2015-08-24
Title
FV Flowplayer Video Player <= 6.0.3.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
fv-wordpress-flowplayer
Published
2018-07-17
Title
FV Flowplayer Video Player 6.1.2-6.6.4 - Unspecified Cross-Site Scripting (XSS)
Slug
fv-wordpress-flowplayer
Published
2018-09-21
Title
FV Flowplayer Video Player < 7.2.1.727 - Authenticated Cross-Site Scripting (XSS)
Slug
fv-wordpress-flowplayer
Published
2019-05-20
Title
FV Flowplayer Video Player < 7.3.14.727 - Unauthenticated Stored XSS
Slug
fv-wordpress-flowplayer
Published
2019-05-20
Title
FV Flowplayer Video Player < 7.3.15.727 - SQL Injection
Slug
fv-wordpress-flowplayer
Published
2019-05-20
Title
FV Flowplayer Video Player < 7.3.15.727 - CSV Export
Slug
fv-wordpress-flowplayer
Published
2019-07-11
Title
FV Flowplayer Video Player < 7.3.19.727 - SQL Injection
Slug
fv-wordpress-flowplayer
Published
2021-01-15
Title
FV Flowplayer Video Player < 7.4.38.727 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
fv-wordpress-flowplayer
Published
2021-08-11
Title
FV Flowplayer Video Player < 7.5.3.727 - Reflected Cross-Site Scripting