WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
handl-utm-grabber
Published
2026-07-01
Title
HandL UTM Grabber / Tracker < 2.9.3 - Unauthenticated Stored Cross-Site Scripting
Slug
handmade-framework
Published
2026-01-07
Title
Handmade Framework <= 3.9 - Authenticated (Contributor+) Local File Inclusion
Slug
handmade-framework
Published
2026-03-09
Title
Handmade Framework <= 3.9 - Reflected Cross-Site Scripting
Slug
handsome-testimonials
Published
2021-06-29
Title
Handsome Testimonials & Reviews < 2.1.1 - Authenticated (Subscriber+) SQL Injection
Slug
handtalk
Published
2025-06-19
Title
Hand Talk < 6.2 - Admin+ Stored XSS
Slug
happiness-reports-for-help-scout
Published
2024-11-04
Title
Satisfaction Reports from Help Scout <= 2.0.3 - Reflected Cross-Site Scripting
Slug
happy-coders-otp-login
Published
2026-06-25
Title
Happy Coders OTP Login for WooCommerce < 2.8 - Unauthenticated Account Takeover via hcotp_auto_login_user
Slug
happy-elementor-addons
Published
2021-04-26
Title
Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS
Slug
happy-elementor-addons
Published
2023-03-29
Title
Happy Addons for Elementor < 3.8.3 - Cross-Site Request Forgery
Slug
happy-elementor-addons
Published
2023-12-27
Title
Happy Addons for Elementor < 3.10.0 - Contributor+ SSRF
Slug
happy-elementor-addons
Published
2024-01-05
Title
Happy Addons for Elementor (Free < 3.10.0, Pro < 2.10.0) - Reflected Cross-Site Scripting
Slug
happy-elementor-addons
Published
2024-02-02
Title
Happy Addons for Elementor < 3.10.2 - Missing Authorization via add_row_actions
Slug
happy-elementor-addons
Published
2024-02-13
Title
Happy Addons for Elementor < 3.10.2 - Contributor+ Stored Cross-Site Scripting
Slug
happy-elementor-addons
Published
2024-02-13
Title
Happy Addons for Elementor < 3.10.2 - Contributor+ Stored Cross-Site Scripting
Slug
happy-elementor-addons
Published
2024-03-06
Title
Happy Addons for Elementor < 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget
Slug
happy-elementor-addons
Published
2024-03-06
Title
Happy Addons for Elementor < 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget
Slug
happy-elementor-addons
Published
2024-01-09
Title
Happy Elementor Addons < 3.10.1 - Contributor+ Stored Cross-Site Scripting
Slug
happy-elementor-addons
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag
Slug
happy-elementor-addons
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag
Slug
happy-elementor-addons
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag
Slug
happy-elementor-addons
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget
Slug
happy-elementor-addons
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy
Slug
happy-elementor-addons
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.5 - Incorrect Authorization to Information Exposure
Slug
happy-elementor-addons
Published
2024-04-19
Title
Happy Addons for Elementor < 3.10.5 - Contributor+ Stored XSS
Slug
happy-elementor-addons
Published
2024-04-19
Title
Happy Addons for Elementor < 3.10.6 - Contributor+ Stored XSS via HTML Tags