WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fbgorilla
Published
2014-09-19
Title
FB Gorilla - SQL Injection
Slug
fbpromotions
Published
2014-08-01
Title
Facebook Promotions <= 1.3.3 - SQL Injection
Slug
fbsurveypro
Published
2014-08-01
Title
fbsurveypro - XSS
Slug
fcchat
Published
2012-01-06
Title
FCChat 2.2.11-2.2.13 - Upload.php Arbitrary File Upload
Slug
fd-elementor-button-plus
Published
2024-11-28
Title
Elementor Button Plus <= 1.3.9 - Contributor+ Stored XSS
Slug
fd-elementor-imagebox
Published
2024-04-29
Title
Elementor ImageBox <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
feather-login-page
Published
2023-05-30
Title
Feather Login Page < 1.1.2 - Cross-Site Request Forgery to Privilege Escalation
Slug
feather-login-page
Published
2023-05-30
Title
Feather Login Page < 1.1.2 - Missing Authorization to Non-Arbitrary User Deletion
Slug
feather-login-page
Published
2023-05-30
Title
Feather Login Page < 1.1.2 - Missing Authorization to Authentication Bypass and Privilege Escalation
Slug
feather-login-page
Published
2023-11-06
Title
Feather Login Page < 1.1.4 - CSRF
Slug
feather-login-page
Published
2024-04-10
Title
Feather Login Page < 1.1.6 - Cross-Site Request Forgery via saveData()
Slug
feather-login-page
Published
2025-11-05
Title
Feather Login Page <= 1.1.7 - Cross-Site Request Forgery
Slug
feature-comments
Published
2014-08-01
Title
Featured Comments 1.2.1 - wp-admin/admin-ajax.php Comment Status Manipulation CSRF
Slug
featured-content-gallery
Published
2024-05-06
Title
Featured Content Gallery <= 3.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
featured-image
Published
2025-11-10
Title
Featured Image < 2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
featured-image
Published
2026-06-25
Title
Featured Image < 2.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
featured-image-caption
Published
2023-11-06
Title
Featured Image Caption < 0.8.11 - Contributor+ Stored XSS
Slug
featured-image-from-url
Published
2019-12-24
Title
Featured Image from URL <= 2.7.7 - Missing Access Controls on REST routes
Slug
featured-image-from-url
Published
2022-07-11
Title
Featured Image from URL < 4.0.1 - Admin+ Stored Cross-Site Scripting
Slug
featured-image-from-url
Published
2022-07-11
Title
Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
featured-image-from-url
Published
2023-12-14
Title
Featured Image from URL (FIFU) < 4.5.4 - Contributor+ Stored XSS
Slug
featured-image-from-url
Published
2024-02-19
Title
Featured Image from URL (FIFU) < 4.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url
Slug
featured-image-from-url
Published
2024-06-28
Title
Featured Image from URL < 4.8.2 - Missing Authorization
Slug
featured-image-from-url
Published
2024-07-05
Title
Featured Image from URL < 4.8.3 - Missing Authorization
Slug
featured-image-from-url
Published
2025-09-25
Title
Featured Image from URL (FIFU) < 5.2.8 - Authenticated (Admin+) SQL Injection