WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
genealogical-tree
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
genealogical-tree
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
genealogical-tree
Published
2025-09-22
Title
Genealogical Tree <= 2.2.6 - Contributor+ Stored XSS
Slug
general-options
Published
2026-05-19
Title
General Options <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ad_contact_number' Parameter
Slug
generate-child-theme
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
generate-child-theme
Published
2024-04-05
Title
Generate Child Theme < 2.0.1 - Cross-Site Request Forgery via process_create_form()
Slug
generate-dummy-posts
Published
2023-10-25
Title
Generate Dummy Posts <= 1.0.0 - Missing Authorization
Slug
generate-pdf-using-contact-form-7
Published
2022-08-31
Title
Generate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site Scripting
Slug
generate-pdf-using-contact-form-7
Published
2024-07-08
Title
Generate PDF using Contact Form 7 < 4.1.3 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
generate-pdf-using-contact-form-7
Published
2024-07-08
Title
Generate PDF using Contact Form 7 < 4.1.3 - Cross-Site Request Forgery to Arbitrary File Upload
Slug
generate-post-thumbnails
Published
2025-03-24
Title
Generate Post Thumbnails <= 0.8 - Cross-Site Request Forgery
Slug
generate-security-txt
Published
2026-06-23
Title
Generate Security.txt < 1.0.14 - Missing Authorization to Authenticated (Subscriber+) Security.txt Deletion via delete_securitytxt AJAX Action
Slug
generateblocks
Published
2021-11-01
Title
GenerateBlocks < 1.4.0 - Contributor+ Stored Cross-Site Scripting
Slug
generateblocks
Published
2024-03-01
Title
GenerateBlocks < 1.8.3 - Contributor+ Arbitrary Draft/Private Post Access
Slug
generateblocks
Published
2025-02-28
Title
GenerateBlocks < 2.0.0 - Authenticated (Contributor+) Sensitive Information Exposure via 'get_image_description'
Slug
generateblocks
Published
2025-10-24
Title
GenerateBlocks < 2.1.2 - Contributor+ Arbitrary Options Disclosure
Slug
generateblocks
Published
2025-12-12
Title
GenerateBlocks < 2.2.0 - Authenticated (Contributor+) Information Exposure via Metadata
Slug
generateblocks
Published
2026-05-04
Title
GenerateBlocks < 2.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements
Slug
generateblocks
Published
2026-05-27
Title
GenerateBlocks < 2.1.1 - Authenticated (Contributor+) Information Disclosure
Slug
generateblocks
Published
2026-07-02
Title
GenerateBlocks < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Headline Block 'linkMetaFieldType' Dynamic Link Attribute
Slug
generatepress-premium
Published
2024-01-18
Title
GeneratePress Premium < 2.4.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom Meta
Slug
generic-elements-for-elementor
Published
2024-11-22
Title
Generic Elements <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
generic-elements-for-elementor
Published
2025-10-02
Title
Generic Elements <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
generic-elements-for-elementor
Published
2025-12-07
Title
Generic Elements <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
genesis-blocks
Published
2024-03-29
Title
Genesis Blocks < 3.1.3 - Contributor+ Stored XSS