WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
google-calendar-events
Published
2023-11-28
Title
Google Calendar Events < 3.2.8 - Contributor+ Stored XSS via shortcode
Slug
google-calendar-events
Published
2023-10-20
Title
Simple Calendar < 3.2.5 - Cross-Site Request Forgery via duplicate_feed
Slug
google-calendar-events
Published
2024-09-24
Title
Simple Calendar – Google Calendar Plugin < 3.4.3 - Reflected Cross-Site Scripting
Slug
google-calendar-events
Published
2025-12-18
Title
Google Calendar Events < 3.6.0 - Unauthenticated Insecure Direct Object Reference
Slug
google-captcha
Published
2015-03-03
Title
Google Captcha <= 1.12 - Authentication Bypass
Slug
google-captcha
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
google-captcha
Published
2025-01-03
Title
reCaptcha by BestWebSoft < 1.79 - CAPTCHA Bypass
Slug
google-cse
Published
2024-05-31
Title
Google CSE <= 1.0.7 - Admin+ Stored XSS
Slug
google-cse
Published
2024-05-31
Title
Google CSE <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
google-distance-calculator
Published
2025-02-27
Title
MK Google Directions < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-distance-calculator
Published
2026-02-19
Title
MK Google Directions <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-docs-rsvp-guestlist
Published
2024-10-21
Title
Google Docs RSVP <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
google-document-embedder
Published
2014-08-01
Title
Google Document Embedder 2.4.6 - pdf.php file Parameter Arbitrary File Disclosure
Slug
google-document-embedder
Published
2014-11-25
Title
Google Document Embedder <= 2.5.14 - SQL Injection
Slug
google-document-embedder
Published
2014-12-03
Title
Google Document Embedder <= 2.5.16 - SQL Injection
Slug
google-document-embedder
Published
2015-02-22
Title
Google Doc Embedder <= 2.5.18 - Cross-Site Scripting (XSS)
Slug
google-document-embedder
Published
2016-09-22
Title
Google Document Embedder < 2.6.1 - XSS
Slug
google-document-embedder
Published
2016-09-27
Title
Google Document Embedder < 2.6.2 - CSRF & XSS
Slug
google-document-embedder
Published
2024-04-29
Title
Google Doc Embedder <= 2.6.4 - Authenticated (Contributor+) Blind Server Side Request Forgery
Slug
google-drive-upload-and-download-link
Published
2025-11-26
Title
Google Drive upload and download link <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-drive-wp-media
Published
2025-02-13
Title
Google Drive WP Media <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-earth-tours
Published
2025-02-03
Title
Google Earth Embed <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-font-fix
Published
2025-03-27
Title
Google Font Fix <= 2.3.1 - Reflected Cross-Site Scripting
Slug
google-image-sitemap
Published
2023-03-14
Title
Google XML Sitemap for Images <= 2.1.3 - Map generation through CSRF
Slug
google-language-translator
Published
2015-08-13
Title
Google Language Translator < 5.0.0 - Authenticated Cross-Site Scripting (XSS)