WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
hotspots
Published
2025-01-16
Title
Hotspots Analytics <= 4.0.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
house-manager
Published
2024-07-16
Title
House Manager <= 1.0.8.4 - Reflected XSS
Slug
houzez-crm
Published
2024-07-08
Title
Houzez CRM < 1.4.3 - Authenticated (Seller+) SQL Injection
Slug
houzez-crm
Published
2025-08-27
Title
Houzez CRM < 1.5.0 - Missing Authorization
Slug
houzez-login-register
Published
2024-09-17
Title
Houzez Login Register < 3.3.0 - Subscriber+ Privilege Escalation via Account Takeover
Slug
houzez-property-feed
Published
2025-02-11
Title
Houzez Property Feed < 2.4.22 - Cross-Site Request Forgery to Property Feed Export Deletion
Slug
houzez-property-feed
Published
2025-03-29
Title
Houzez Property Feed < 2.5.5 - Unauthenticated Arbitrary File Download
Slug
houzez-theme-functionality
Published
2024-07-08
Title
Houzez Theme - Functionality < 3.2.3 - Authenticated (Seller+) SQL Injection
Slug
houzez-theme-functionality
Published
2025-10-16
Title
Houzez Theme - Functionality < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
houzez-theme-functionality
Published
2025-10-16
Title
Houzez Theme - Functionality < 4.2.0 - Authenticated (Contributor+) Local File Inclusion
Slug
houzez-theme-functionality
Published
2025-10-16
Title
Houzez Theme - Functionality < 4.2.0 - Unauthenticated Stored Cross-Site Scripting
Slug
houzez-theme-functionality
Published
2025-09-23
Title
Houzez Theme - Functionality < 4.1.4 - Subscriber+ Arbitrary File Download
Slug
houzez-theme-functionality
Published
2025-09-23
Title
Houzez Theme - Functionality < 4.1.4 - Missing Authorization
Slug
houzez-theme-functionality
Published
2026-01-17
Title
Houzez Theme - Functionality < 4.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hover-effects
Published
2022-05-16
Title
Hover Effects < 2.1.1 - Admin+ LFI
Slug
hover-effects
Published
2025-06-27
Title
Hover Effects < 2.1.3 - Authenticated (Administrator+) SQL Injection
Slug
hover-image
Published
2023-01-13
Title
Hover Image <= 1.4.1 - CSRF
Slug
hover-image-button
Published
2025-02-24
Title
Hover Image Button <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hover-video-preview
Published
2024-10-31
Title
Hover Video Preview <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
how-to-wp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
hpbseo
Published
2025-07-15
Title
hpb seo plugin for WordPress <= 3.0.1 - Reflected Cross-Site Scripting
Slug
hpbtool
Published
2022-05-09
Title
HPB Dashboard <= 1.3.1 - Admin+ Stored Cross Site Scripting
Slug
hq-rental-software
Published
2024-12-11
Title
HQ Rental Software <= 1.5.29 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
hq60-fidelity-card
Published
2024-11-04
Title
HQ60 Fidelity Card <= 1.8 - Reflected Cross-Site Scripting
Slug
hqtheme-extra
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius