WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
geotagged-media
Published
2025-01-16
Title
Geotagged Media <= 0.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
geounit-maps
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
geowidget
Published
2026-02-13
Title
Geo Widet <= 1.0 - Reflected Cross-Site Scripting
Slug
gerador-de-certificados-devapps
Published
2026-04-07
Title
Gerador de Certificados – DevApps <= 1.3.6 - Authenticated (Administrator+) Arbitrary File Upload
Slug
gerryworks-post-by-mail
Published
2024-10-18
Title
GERRYWORKS Post by Mail <= 1.0 - Contributor+ Privilege Escalation
Slug
geshi-source-colorer
Published
2014-08-01
Title
geshi-source-colorer <= 0.13 - XSS in ZeroClipboard
Slug
gestion-pymes
Published
2023-07-20
Title
Gestion-Pymes <= 1.5.6 - Admin+ Stored XSS
Slug
gestion-tarifs
Published
2025-08-14
Title
Gestion de tarifs <= 1.4 - Authenticated (Contributor+) SQL Injection
Slug
gestpay-for-woocommerce
Published
2024-02-26
Title
Gestpay for WooCommerce < 20240307 - Cross-Site Request Forgery (CSRF) via ajax_set_default_card
Slug
gestpay-for-woocommerce
Published
2024-02-27
Title
Gestpay for WooCommerce < 20240307 - Cross-Site Request Forgery (CSRF) via ajax_unset_default_card
Slug
gestpay-for-woocommerce
Published
2024-02-27
Title
Gestpay for WooCommerce < 20240307 - Cross-Site Request Forgery (CSRF) via ajax_delete_card
Slug
get-a-quote-button-for-woocommerce
Published
2024-11-22
Title
Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation < 1.5 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form
Slug
get-a-quote-for-woocommerce
Published
2024-10-30
Title
Get Quote For Woocommerce <= 1.0.0 - Unauthenticated Quote PDF and CSV Download
Slug
get-bookings-wp
Published
2025-02-17
Title
GetBookingsWp - Appointments & Bookings Plugin Basic Version <= 1.1.27 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Slug
get-bookings-wp
Published
2025-04-02
Title
GetBookingsWP <= 1.1.27 - Missing Authorization
Slug
get-cash
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
get-cash
Published
2025-09-05
Title
Get Cash <= 3.2.3 - Contributor+ Stored XSS
Slug
get-cash
Published
2025-12-01
Title
Get Cash <= 3.2.3 - Missing Authorization
Slug
get-custom-field-values
Published
2021-11-09
Title
Get Custom Field Values < 4.0.1 - Contributor+ Stored Cross-Site Scripting
Slug
get-custom-field-values
Published
2021-11-09
Title
Get Custom Field Values < 4.0 - Contributors+ Arbitrary Post Metadata Access
Slug
get-custom-field-values
Published
2023-10-18
Title
Get Custom Field Values < 4.1 - Admin+ Stored XSS
Slug
get-directions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
get-directions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
get-post-content-shortcode
Published
2024-12-13
Title
Get Post Content Shortcode <= 0.4 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via post_content Shortcode
Slug
get-post-custom-taxonomy-term-shortcode
Published
2021-07-05
Title
Advanced Post Listing Shortcode <= 2.8 - CSRF Bypass