WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fat-services-booking
Published
2024-12-02
Title
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
fat-services-booking
Published
2024-12-02
Title
FAT Services Booking <= 5.6 - Unauthenticated SQL Injection
Slug
fat-services-booking
Published
2025-04-21
Title
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) SQL Injection
Slug
fat-services-booking
Published
2025-05-16
Title
FAT Services Booking <= 5.5 - Authenticated (Contributor+) Local File Inclusion
Slug
fatal-error-notify
Published
2024-01-30
Title
Fatal Error Notify < 1.5.3 - Subscriber+ Test Error Email Sending
Slug
fathom-analytics
Published
2021-12-08
Title
Fathom Analytics < 3.0.5 - Admin+ Stored Cross-Site Scripting
Slug
fathom-analytics
Published
2023-10-25
Title
Fathom Analytics < 3.1.0 - Admin+ Stored XSS
Slug
fattura24
Published
2023-10-09
Title
Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
Slug
favicon-by-realfavicongenerator
Published
2015-04-01
Title
Favicon by RealFaviconGenerator <= 1.2.12 - Cross-Site Scripting (XSS)
Slug
favicon-by-realfavicongenerator
Published
2021-07-27
Title
Favicon by RealFaviconGenerator < 1.3.22 - Reflected Cross-Site Scripting (XSS)
Slug
favicon-by-realfavicongenerator
Published
2022-03-21
Title
Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting
Slug
favicon-generator
Published
2024-08-23
Title
Favicon Generator < 2.1 - Arbitrary File Upload via CSRF
Slug
favicon-generator
Published
2024-08-23
Title
Favicon Generator < 2.1 - Arbitrary File Deletion via CSRF
Slug
favicon-generator
Published
2024-08-23
Title
Favicon Generator < 2.1 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
favicon-my-blog
Published
2024-11-22
Title
Favicon My Blog <= 1.0.2 - Cross-Site Request Forgery
Slug
favicon-rotator
Published
2024-03-26
Title
Favicon Rotator < 1.2.11 - Reflected Cross-Site Scripting
Slug
favicon-switcher
Published
2022-09-21
Title
FavIcon Switcher <= 1.2.11 - Arbitrary Settings Change via CSRF
Slug
favorites
Published
2023-05-30
Title
Favorites < 2.3.3 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
favorites
Published
2024-03-29
Title
Favorites < 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
favorites
Published
2025-03-04
Title
Favorites < 2.3.5 - Admin+ Stored XSS
Slug
favorites
Published
2025-07-21
Title
Favorites <= 2.3.6 - Unauthenticated Local File Inclusion
Slug
fb-account-kit-login
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
fb-account-kit-login
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
fb-messenger-live-chat
Published
2019-05-16
Title
Live Chat with Facebook Messenger <= 1.4.6 - Stored XSS
Slug
fb-reviews-widget
Published
2025-03-27
Title
Trust.Reviews < 2.4 - Missing Authorization