WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
favicon-generator
Published
2024-08-23
Title
Favicon Generator < 2.1 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
favicon-my-blog
Published
2024-11-22
Title
Favicon My Blog <= 1.0.2 - Cross-Site Request Forgery
Slug
favicon-rotator
Published
2024-03-26
Title
Favicon Rotator < 1.2.11 - Reflected Cross-Site Scripting
Slug
favicon-rotator
Published
2026-04-29
Title
Favicon Rotator < 1.2.12 - Unauthenticated Stored Cross-Site Scripting
Slug
favicon-switcher
Published
2022-09-21
Title
FavIcon Switcher <= 1.2.11 - Arbitrary Settings Change via CSRF
Slug
favorites
Published
2023-05-30
Title
Favorites < 2.3.3 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
favorites
Published
2024-03-29
Title
Favorites < 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
favorites
Published
2025-03-04
Title
Favorites < 2.3.5 - Admin+ Stored XSS
Slug
favorites
Published
2025-07-21
Title
Favorites <= 2.3.6 - Unauthenticated Local File Inclusion
Slug
fb-account-kit-login
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
fb-account-kit-login
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
fb-messenger-live-chat
Published
2019-05-16
Title
Live Chat with Facebook Messenger <= 1.4.6 - Stored XSS
Slug
fb-reviews-widget
Published
2025-03-27
Title
Trust.Reviews < 2.4 - Missing Authorization
Slug
fb-reviews-widget
Published
2025-12-08
Title
Social Reviews & Recommendations < 2.6 - Unauthenticated Stored Cross-Site Scripting via Social Media Reviews
Slug
fb-status-updater
Published
2025-02-03
Title
Status Updater <= 1.9.2 - Reflected Cross-Site Scripting
Slug
fb2wp-integration-tools
Published
2025-10-17
Title
XX2WP Integration Tools < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fbgorilla
Published
2014-09-19
Title
FB Gorilla - SQL Injection
Slug
fbpromotions
Published
2014-08-01
Title
Facebook Promotions <= 1.3.3 - SQL Injection
Slug
fbsurveypro
Published
2014-08-01
Title
fbsurveypro - XSS
Slug
fcchat
Published
2012-01-06
Title
FCChat 2.2.11-2.2.13 - Upload.php Arbitrary File Upload
Slug
fd-elementor-button-plus
Published
2024-11-28
Title
Elementor Button Plus <= 1.3.9 - Contributor+ Stored XSS
Slug
fd-elementor-imagebox
Published
2024-04-29
Title
Elementor ImageBox <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
feather-login-page
Published
2023-05-30
Title
Feather Login Page < 1.1.2 - Cross-Site Request Forgery to Privilege Escalation
Slug
feather-login-page
Published
2023-05-30
Title
Feather Login Page < 1.1.2 - Missing Authorization to Non-Arbitrary User Deletion
Slug
feather-login-page
Published
2023-05-30
Title
Feather Login Page < 1.1.2 - Missing Authorization to Authentication Bypass and Privilege Escalation