WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
hurrytimer
Published
2025-02-13
Title
HurryTimer < 2.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name
Slug
hurrytimer
Published
2025-06-27
Title
HurryTimer < 2.14.0 - Missing Authorization
Slug
huskerportfolio
Published
2014-08-01
Title
HuskerPortfolio 0.3 - huskerPortfolio.php File Upload CSRF
Slug
huurkalender-wp
Published
2025-01-07
Title
Huurkalender WP < 1.6.0 - Contributor+ Stored XSS
Slug
huzzaz-video-gallery
Published
2025-09-30
Title
Video Gallery by Huzzaz <= 10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hybrid-composer
Published
2019-07-10
Title
Hybrid Composer <= 1.4.6 - Unauthenticated Options Update
Slug
hybrid-gallery
Published
2025-01-16
Title
Gallery: Hybrid – Advanced Visual Gallery <= 1.4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hydra-booking
Published
2025-06-05
Title
Hydra Booking < 1.1.11 - Authenticated (Contributor+) SQL Injection
Slug
hydra-booking
Published
2025-07-28
Title
Hydra Booking 1.1.0 - 1.1.18 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via tfhb_reset_password_callback Function
Slug
hydra-booking
Published
2025-11-10
Title
Hydra Booking < 1.1.28 - Unauthenticated Payment Bypass
Slug
hydra-booking
Published
2025-11-10
Title
Hydra Booking < 1.1.28 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation
Slug
hydra-booking
Published
2025-06-12
Title
Hydra Booking < 1.1.11 - Authenticated (Subscriber+) SQL Injection
Slug
hydra-booking
Published
2025-06-12
Title
Hydra Booking < 1.1.10 - Missing Authorization
Slug
hydra-booking
Published
2025-11-27
Title
Hydra Booking < 1.1.33 - Authenticated (Custom role+) SQL Injection
Slug
hyp3rl0cal-city-search
Published
2025-01-16
Title
CtyGrid Hyp3rL0cal Search WordPress Plugin <= 0.1.1.1 - Reflected Cross-Site Scripting
Slug
hypercomments
Published
2020-10-07
Title
HyperComments <= 1.2.2 - Unauthenticated Arbitrary File Deletion
Slug
hypercomments
Published
2025-06-04
Title
HyperComments <= 1.2.2 - Unauthenticated (Subscriber+) Arbitrary Options Update
Slug
hyperlink-group-block
Published
2024-10-15
Title
Hyperlink Group Block < 1.17.6 - Contributor+ Stored XSS
Slug
hyperlink-group-block
Published
2025-04-01
Title
Hyperlink Group Block < 2.0.2 - Contributor+ Stored XSS
Slug
hypotext
Published
2025-04-01
Title
Hypotext <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hyve-lite
Published
2025-01-24
Title
AI Chatbot for WordPress – Hyve Lite < 1.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting