WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
http-auth
Published
2023-07-26
Title
HTTP Auth < 1.0.0 - Settings Update via CSRF
Slug
http-headers
Published
2023-04-24
Title
HTTP Headers < 1.18.8 - Admin+ SQL Injection
Slug
http-headers
Published
2023-06-19
Title
HTTP Headers < 1.18.11 - Admin+ Remote Code Execution
Slug
http-headers
Published
2023-07-13
Title
HTTP Headers < 1.19.0 - Admin+ SSRF
Slug
http-headers
Published
2023-07-10
Title
HTTP Headers < 1.19.0 - Admin+ Stored XSS
Slug
http-https-remover
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
http-https-remover
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
https-links-in-content
Published
2025-01-16
Title
HTTP to HTTPS link changer by Eyga.net <= 0.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
hub-core
Published
2025-11-09
Title
Hub Core <= 5.0.8 - Authenticated (Contributor+) Local File Inclusion
Slug
hub2word
Published
2022-02-16
Title
hub2word <= 1.1.0 - Subscriber+ Arbitrary Options Update
Slug
hueman-addons
Published
2023-01-26
Title
Hueman Addons <= 2.3.3 - Contributor+ Stored XSS via Shortcode
Slug
huger-elementor
Published
2025-12-11
Title
Huger for Elementor <= 1.1.5 - Missing Authorization
Slug
hummingbird-performance
Published
2022-03-23
Title
Hummingbird < 3.3.2 - Admin+ Stored Cross-Site Scripting
Slug
hummingbird-performance
Published
2023-03-20
Title
Hummingbird < 3.4.2 - Unauthenticated Path Traversal
Slug
hummingbird-performance
Published
2024-04-22
Title
Hummingbird < 3.7.4 - Missing Authorization
Slug
hummingbird-performance
Published
2024-08-07
Title
Hummingbird < 3.9.2 - Cross-Site Request Forgery
Slug
hummingbird-performance
Published
2024-08-07
Title
Hummingbird < 3.9.2 - Missing Authorization
Slug
hummingbird-performance
Published
2025-12-17
Title
Hummingbird < 3.18.1 - Unauthenticated Sensitive Information Exposure via Log File
Slug
hungarian-pickup-points-for-woocommerce
Published
2022-09-14
Title
Multiple Plugins from Viszt Peter - Multiple CSRF
Slug
hungred-post-thumbnail
Published
2014-08-01
Title
Hungred Post Thumbnail - hpt_file_upload.php File Upload PHP Code Execution
Slug
hunk-companion
Published
2024-10-10
Title
Hunk Companion < 1.8.5 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
Slug
hunk-companion
Published
2024-12-10
Title
Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation
Slug
hurrakify
Published
2024-12-11
Title
Hurrakify < 8.0.1 - Unauthenticated Server-Side Request Forgery
Slug
hurrytimer
Published
2024-04-16
Title
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce < 2.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hurrytimer
Published
2024-10-23
Title
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce < 2.11.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Publication