WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fastspring
Published
2025-05-30
Title
FastSpring <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fat-coming-soon
Published
2025-04-09
Title
FAT Cooming Soon <= 1.1 - Unauthenticated Local File Inclusion
Slug
fat-event-lite
Published
2025-01-07
Title
FAT Event Lite <= 1.1 - Unauthenticated Local File Inclusion
Slug
fat-event-lite
Published
2025-01-15
Title
FAT Event Lite <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fat-event-lite
Published
2025-01-16
Title
FAT Event Lite <= 1.1 - Authenticated (Contributor+) Local File Inclusion
Slug
fat-rat-collect
Published
2024-11-12
Title
Fat Rat Collect < 2.7.4 - Reflected Cross-Site Scripting
Slug
fat-services-booking
Published
2024-12-02
Title
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
fat-services-booking
Published
2024-12-02
Title
FAT Services Booking <= 5.6 - Unauthenticated SQL Injection
Slug
fat-services-booking
Published
2025-04-21
Title
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) SQL Injection
Slug
fat-services-booking
Published
2025-05-16
Title
FAT Services Booking <= 5.5 - Authenticated (Contributor+) Local File Inclusion
Slug
fatal-error-notify
Published
2024-01-30
Title
Fatal Error Notify < 1.5.3 - Subscriber+ Test Error Email Sending
Slug
fathom-analytics
Published
2021-12-08
Title
Fathom Analytics < 3.0.5 - Admin+ Stored Cross-Site Scripting
Slug
fathom-analytics
Published
2023-10-25
Title
Fathom Analytics < 3.1.0 - Admin+ Stored XSS
Slug
fattura24
Published
2023-10-09
Title
Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
Slug
favicon-by-realfavicongenerator
Published
2015-04-01
Title
Favicon by RealFaviconGenerator <= 1.2.12 - Cross-Site Scripting (XSS)
Slug
favicon-by-realfavicongenerator
Published
2021-07-27
Title
Favicon by RealFaviconGenerator < 1.3.22 - Reflected Cross-Site Scripting (XSS)
Slug
favicon-by-realfavicongenerator
Published
2022-03-21
Title
Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting
Slug
favicon-generator
Published
2024-08-23
Title
Favicon Generator < 2.1 - Arbitrary File Upload via CSRF
Slug
favicon-generator
Published
2024-08-23
Title
Favicon Generator < 2.1 - Arbitrary File Deletion via CSRF
Slug
favicon-generator
Published
2024-08-23
Title
Favicon Generator < 2.1 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
favicon-my-blog
Published
2024-11-22
Title
Favicon My Blog <= 1.0.2 - Cross-Site Request Forgery
Slug
favicon-rotator
Published
2024-03-26
Title
Favicon Rotator < 1.2.11 - Reflected Cross-Site Scripting
Slug
favicon-switcher
Published
2022-09-21
Title
FavIcon Switcher <= 1.2.11 - Arbitrary Settings Change via CSRF
Slug
favorites
Published
2023-05-30
Title
Favorites < 2.3.3 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
favorites
Published
2024-03-29
Title
Favorites < 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode