WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
happy-elementor-addons
Published
2024-04-25
Title
Happy Addons for Elementor < 3.10.7 - Contributor+ Stored Cross-Site Scripting
Slug
happy-elementor-addons
Published
2024-05-15
Title
Happy Addons for Elementor < 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget
Slug
happy-elementor-addons
Published
2024-05-15
Title
Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS < 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
Slug
happy-elementor-addons
Published
2024-05-17
Title
Happy Addons for Elementor < 3.10.9 - Contributor+ Stored XSS
Slug
happy-elementor-addons
Published
2024-05-30
Title
Happy Addons for Elementor < 3.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion
Slug
happy-elementor-addons
Published
2024-05-30
Title
Happy Addons for Elementor < 3.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget
Slug
happy-elementor-addons-pro
Published
2021-04-26
Title
Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS
Slug
happy-elementor-addons-pro
Published
2023-08-29
Title
Happy Elementor Addons Pro < 2.8.1 - Reflected XSS
Slug
happy-elementor-addons-pro
Published
2024-01-05
Title
Happy Addons for Elementor (Free < 3.10.0, Pro < 2.10.0) - Reflected Cross-Site Scripting
Slug
happyforms
Published
2023-01-13
Title
Happyforms < 1.22.0 - Contributor+ Stored XSS
Slug
happyforms
Published
2023-11-27
Title
Happyforms < 1.25.10 - Reflected Cross-Site Scripting
Slug
happyforms
Published
2024-01-31
Title
Happyforms < 1.25.11 - Missing Authorization
Slug
hash-elements
Published
2024-03-28
Title
Hash Elements < 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hash-elements
Published
2024-05-22
Title
Hash Elements < 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter in Multiple Widgets
Slug
hash-form
Published
2024-05-22
Title
Hash Form – Drag & Drop Form Builder < 1.1.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution
Slug
hash-form
Published
2024-05-22
Title
Hash Form – Drag & Drop Form Builder < 1.1.1 - Unauthenticated PHP Object Injection
Slug
hashbar-wp-notification-bar
Published
2022-12-27
Title
HashBar – WordPress Notification Bar < 1.3.6 - Contributor+ Stored XSS via Shortcode
Slug
hashbar-wp-notification-bar
Published
2023-12-26
Title
HashBar – WordPress Notification Bar < 1.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
hashthemes-demo-importer
Published
2021-10-26
Title
HashThemes Demo Importer < 1.1.2 - Improper Access Control to Blog Reset
Slug
haxcan
Published
2021-07-05
Title
Haxcan <= 1.0.0 - Arbitrary File Access
Slug
haxcan
Published
2021-07-05
Title
Haxcan <= 1.0.0 - CSRF Bypass
Slug
hc-custom-wp-admin-url
Published
2022-05-18
Title
HC Custom WP-Admin URL <= 1.4 - Unauthenticated Arbitrary Settings Update via CSRF
Slug
hc-custom-wp-admin-url
Published
2022-05-18
Title
HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure
Slug
hcaptcha-for-forms-and-more
Published
2024-04-19
Title
hCaptcha for WordPress < 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via cf7-hcaptcha Shortcode
Slug
hd-quiz
Published
2021-07-26
Title
HD Quiz < 1.8.4 - Authenticated Stored XSS