WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
hide-shipping-method-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
hide-shipping-method-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
hide-shipping-method-for-woocommerce
Published
2025-01-31
Title
Hide Shipping Method For WooCommerce < 1.5.2 - Missing Authorization
Slug
hide-text-shortcode
Published
2025-08-13
Title
Hide Text Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hide-wp-toolbar
Published
2025-09-22
Title
Hide WP Toolbar <= 2.7 - Missing Authorization
Slug
hide_my_wp
Published
2015-07-27
Title
Hide My WP < 4.52 - Stored Cross-Site Scripting (XSS)
Slug
hide_my_wp
Published
2015-08-13
Title
Hide My WP <= 4.53 - Stored-Cross Site Scripting (XSS)
Slug
hide_my_wp
Published
2021-11-24
Title
Hide My WP < 6.2.4 - Unauthenticated Plugin Deactivation
Slug
hide_my_wp
Published
2021-11-24
Title
Hide My WP < 6.2.4 - Unauthenticated SQL Injection
Slug
hide_my_wp
Published
2021-11-24
Title
Hide My WP < 6.2.4 - Unauthenticated SQLi
Slug
hide_my_wp
Published
2021-11-24
Title
Hide My WP < 6.2.4 - Unauthenticated Reset Token Disclosure
Slug
hide_my_wp
Published
2023-01-11
Title
Hide My WP < 6.2.9 - Unauthenticated SQLi
Slug
hide_my_wp
Published
2026-01-13
Title
Hide My WP <= 6.2.12 - Reflected Cross-Site Scripting
Slug
hidepost
Published
2025-06-27
Title
HidePost <= 2.3.8 - Cross-Site Request Forgery
Slug
hidepost
Published
2025-09-26
Title
HidePost <= 2.3.8 - Cross-Site Request Forgery
Slug
highlight
Published
2021-08-06
Title
Highlight < 0.9.3 - Authenticated Stored Cross-Site Scripting
Slug
highlight
Published
2025-01-03
Title
Highlight < 2.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
highlight-and-share
Published
2025-09-22
Title
Highlight and Share – Social Text and Image Sharing < 5.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
highlight-and-share
Published
2025-12-15
Title
Highlight and Share < 5.3.0 - Missing Authorization
Slug
highlight-focus
Published
2022-10-13
Title
Highlight Focus <= 1.1 - Admin+ Stored Cross Site Scripting
Slug
highlight-search-terms-results
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
hipaatizer
Published
2024-11-22
Title
HIPAA Compliant Forms with Drag’n’Drop HIPAA Form Builder. Sign HIPAA documents < 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hippoo
Published
2025-12-09
Title
Hippoo Mobile App for WooCommerce < 1.7.2 - Unauthenticated Arbitrary File Read
Slug
hippoo
Published
2025-12-11
Title
Hippoo Mobile App for WooCommerce < 1.7.2 - Missing Authorization to Unauthenticated Limited File Write
Slug
hire-me-widget
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius