WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
google-analytics-premium
Published
2026-06-11
Title
MonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromise
Slug
google-analytics-top-posts-widget
Published
2015-04-20
Title
Google Analytics Top Content Widget < 1.5.7 - Reflected XSS
Slug
google-apps-login
Published
2022-12-01
Title
Google Apps Login < 3.4.5 - Admin+ Stored XSS
Slug
google-authenticator
Published
2016-04-28
Title
Google Authenticator <= 0.47 - Two Factor Authentication Bypass
Slug
google-authenticator
Published
2026-08-03
Title
Google Authenticator < 0.56 - 2FA Secret Overwrite via CSRF
Slug
google-calendar-events
Published
2014-10-08
Title
Google Calendar Events < 2.0.4 - XSS
Slug
google-calendar-events
Published
2023-10-18
Title
Google Calendar Events < 3.2.6 - Cross-Site Request Forgery (CSRF)
Slug
google-calendar-events
Published
2023-11-28
Title
Google Calendar Events < 3.2.8 - Contributor+ Stored XSS via shortcode
Slug
google-calendar-events
Published
2023-10-20
Title
Simple Calendar < 3.2.5 - Cross-Site Request Forgery via duplicate_feed
Slug
google-calendar-events
Published
2024-09-24
Title
Simple Calendar – Google Calendar Plugin < 3.4.3 - Reflected Cross-Site Scripting
Slug
google-calendar-events
Published
2025-12-18
Title
Google Calendar Events < 3.6.0 - Unauthenticated Insecure Direct Object Reference
Slug
google-captcha
Published
2015-03-03
Title
Google Captcha <= 1.12 - Authentication Bypass
Slug
google-captcha
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
google-captcha
Published
2025-01-03
Title
reCaptcha by BestWebSoft < 1.79 - CAPTCHA Bypass
Slug
google-cse
Published
2024-05-31
Title
Google CSE <= 1.0.7 - Admin+ Stored XSS
Slug
google-cse
Published
2024-05-31
Title
Google CSE <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
google-distance-calculator
Published
2025-02-27
Title
MK Google Directions < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-distance-calculator
Published
2026-02-19
Title
MK Google Directions <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-docs-rsvp-guestlist
Published
2024-10-21
Title
Google Docs RSVP <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
google-document-embedder
Published
2014-08-01
Title
Google Document Embedder 2.4.6 - pdf.php file Parameter Arbitrary File Disclosure
Slug
google-document-embedder
Published
2014-11-25
Title
Google Document Embedder <= 2.5.14 - SQL Injection
Slug
google-document-embedder
Published
2014-12-03
Title
Google Document Embedder <= 2.5.16 - SQL Injection
Slug
google-document-embedder
Published
2015-02-22
Title
Google Doc Embedder <= 2.5.18 - Cross-Site Scripting (XSS)
Slug
google-document-embedder
Published
2016-09-22
Title
Google Document Embedder < 2.6.1 - XSS
Slug
google-document-embedder
Published
2016-09-27
Title
Google Document Embedder < 2.6.2 - CSRF & XSS