WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
full-customer
Published
2023-08-08
Title
FULL - Customer < 2.3 - Subscriber+ Arbitrary Plugin Installation
Slug
full-customer
Published
2023-08-08
Title
FULL - Customer < 2.3 - Subscriber+ Health Check Disclosure
Slug
full-customer
Published
2024-07-10
Title
FULL < 3.1.13 - Unauthenticated Stored Cross-Site Scripting via License Plan Parameter
Slug
full-customer
Published
2024-10-10
Title
FULL – Cliente < 3.1.23 - Reflected Cross-Site Scripting
Slug
full-customer
Published
2024-12-11
Title
FULL Customer < 3.1.26 - Authenticated (Contributor+) Local File Inclusion
Slug
full-customer
Published
2025-05-01
Title
FULL – Cliente 3.1.5 - 3.1.25 - Authenticated (Subscriber+) SQL Injection
Slug
full-page-blog-designer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
full-picture-analytics-cookie-notice
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
full-picture-analytics-cookie-notice
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
full-screen-menu-for-elementor
Published
2024-12-20
Title
Full Screen Menu for Elementor <= 1.0.7 - Authenticated (Contributor+) Post Disclosure
Slug
full-screen-page-background-image-slideshow
Published
2024-11-13
Title
Full Screen (Page) Background Image Slideshow <= 1.1 - Admin+ Stored XSS
Slug
full-site-builder-for-elementor
Published
2025-09-22
Title
StylePress for Elementor <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
full-site-editing
Published
2023-12-26
Title
WordPress.com Editing Toolkit < 3.79150 - Contributor+ Stored XSS
Slug
full-width-responsive-slider-wp
Published
2023-03-28
Title
Full Width Banner Slider Wp <= 1.1.7 - Reflected XSS
Slug
fullscreen-background
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
fullscreen-galleria
Published
2024-03-25
Title
Fullscreen Galleria < 1.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fullscreen-galleria
Published
2026-08-15
Title
Fullscreen Galleria < 1.6.13 - Authenticated (Contributor+) SQL Injection via 'href' Attribute in Post Content
Slug
fulltext-search
Published
2024-03-25
Title
WP Fast Total Search < 1.60.213 - Authenticated (Contributor+) Stored Cross-Site Scripting via WPFTS Live Search Widget
Slug
fulltext-search
Published
2024-07-11
Title
WP Fast Total Search < 1.69.234 - Missing Authorization
Slug
fulltext-search
Published
2024-07-19
Title
WP Fast Total Search < 1.70.236 - Cross-Site Request Forgery
Slug
fulltext-search
Published
2024-08-01
Title
WP Fast Total Search < 1.69.234 - Unauthenticated Stored Cross-Site Scripting
Slug
fulltext-search
Published
2025-01-24
Title
WP Fast Total Search < 1.79.262 - Missing Authorization
Slug
fulltext-search
Published
2025-01-24
Title
WP Fast Total Search < 1.79.262 - Cross-Site Request Forgery
Slug
fulltext-search
Published
2025-03-27
Title
WP Fast Total Search < 1.79.264 - Missing Authorization
Slug
fulltext-search
Published
2025-08-22
Title
WP Fast Total Search < 1.79.274 - Cross-Site Request Forgery