WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
hub2word
Published
2022-02-16
Title
hub2word <= 1.1.0 - Subscriber+ Arbitrary Options Update
Slug
hueman-addons
Published
2023-01-26
Title
Hueman Addons <= 2.3.3 - Contributor+ Stored XSS via Shortcode
Slug
huger-elementor
Published
2025-12-11
Title
Huger for Elementor <= 1.1.5 - Missing Authorization
Slug
hummingbird-performance
Published
2022-03-23
Title
Hummingbird < 3.3.2 - Admin+ Stored Cross-Site Scripting
Slug
hummingbird-performance
Published
2023-03-20
Title
Hummingbird < 3.4.2 - Unauthenticated Path Traversal
Slug
hummingbird-performance
Published
2024-04-22
Title
Hummingbird < 3.7.4 - Missing Authorization
Slug
hummingbird-performance
Published
2024-08-07
Title
Hummingbird < 3.9.2 - Cross-Site Request Forgery
Slug
hummingbird-performance
Published
2024-08-07
Title
Hummingbird < 3.9.2 - Missing Authorization
Slug
hummingbird-performance
Published
2025-12-17
Title
Hummingbird < 3.18.1 - Unauthenticated Sensitive Information Exposure via Log File
Slug
hungarian-pickup-points-for-woocommerce
Published
2022-09-14
Title
Multiple Plugins from Viszt Peter - Multiple CSRF
Slug
hungred-post-thumbnail
Published
2014-08-01
Title
Hungred Post Thumbnail - hpt_file_upload.php File Upload PHP Code Execution
Slug
hunk-companion
Published
2024-10-10
Title
Hunk Companion < 1.8.5 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
Slug
hunk-companion
Published
2024-12-10
Title
Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation
Slug
hurrakify
Published
2024-12-11
Title
Hurrakify < 8.0.1 - Unauthenticated Server-Side Request Forgery
Slug
hurrytimer
Published
2024-04-16
Title
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce < 2.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hurrytimer
Published
2024-10-23
Title
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce < 2.11.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Publication
Slug
hurrytimer
Published
2025-02-13
Title
HurryTimer < 2.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name
Slug
hurrytimer
Published
2025-06-27
Title
HurryTimer < 2.14.0 - Missing Authorization
Slug
hurrytimer
Published
2026-01-11
Title
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce < 2.14.3 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
huskerportfolio
Published
2014-08-01
Title
HuskerPortfolio 0.3 - huskerPortfolio.php File Upload CSRF
Slug
huurkalender-wp
Published
2025-01-07
Title
Huurkalender WP < 1.6.0 - Contributor+ Stored XSS
Slug
huzzaz-video-gallery
Published
2025-09-30
Title
Video Gallery by Huzzaz <= 10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hybrid-composer
Published
2019-07-10
Title
Hybrid Composer <= 1.4.6 - Unauthenticated Options Update
Slug
hybrid-gallery
Published
2025-01-16
Title
Gallery: Hybrid – Advanced Visual Gallery <= 1.4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hydra-booking
Published
2025-06-05
Title
Hydra Booking < 1.1.11 - Authenticated (Contributor+) SQL Injection