WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
hdw-tube
Published
2016-04-12
Title
HDW WordPress Video Gallery <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
head-meta-data
Published
2025-12-14
Title
Head Meta Data < 20251118 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
header-and-footer-script-adder
Published
2025-12-12
Title
Header Footer Script Adder – Insert Code in Header, Body & Footer < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
header-enhancement
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
header-footer
Published
2025-02-20
Title
Head, Footer and Post Injections < 3.3.1 - Authenticated (Administrator+) PHP Code Injection in Multisite Environments
Slug
header-footer-code
Published
2024-08-22
Title
NinjaTeam Header Footer Custom Code <= 1.2 - Admin+ Stored XSS via CSS Styles
Slug
header-footer-code
Published
2024-08-22
Title
NinjaTeam Header Footer Custom Code < 1.2 - Admin+ Stored XSS
Slug
header-footer-code-manager
Published
2021-10-11
Title
Header Footer Code Manager < 1.1.14 - Admin+ SQL Injections
Slug
header-footer-code-manager
Published
2022-02-22
Title
Header Footer Code Manager < 1.1.17 - Reflected Cross-Site Scripting
Slug
header-footer-code-manager
Published
2022-07-04
Title
Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting
Slug
header-footer-code-manager
Published
2023-07-04
Title
Header Footer Code Manager < 1.1.35 - Snippets Activation/Deactivation/Deletion via CSRF
Slug
header-footer-composer
Published
2024-11-01
Title
Header Footer Composer for Elementor <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
header-footer-elementor
Published
2021-04-13
Title
Elementor - Header, Footer & Blocks Template < 1.5.8 - Contributor+ Stored XSS
Slug
header-footer-elementor
Published
2024-03-11
Title
Elementor Header & Footer Builder < 1.6.25 - Contributor+ Stored Cross-Site Scripting
Slug
header-footer-elementor
Published
2024-05-15
Title
Elementor Header & Footer Builder < 1.6.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
header-footer-elementor
Published
2024-05-16
Title
Elementor Header & Footer Builder < 1.6.27 - Authenticated (Author+) HTML Injection
Slug
header-footer-elementor
Published
2024-05-23
Title
Elementor Header & Footer Builder < 1.6.26.1 - Contributor+ Stored XSS
Slug
header-footer-elementor
Published
2024-06-12
Title
Elementor Header & Footer Builder < 1.6.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title Widget
Slug
header-footer-elementor
Published
2024-07-01
Title
Elementor – Header, Footer & Blocks Template < 1.6.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
header-footer-elementor
Published
2024-10-23
Title
Elementor Header & Footer Builder < 1.6.44 - Authenticated (Contributor+) Information Disclosure via Shortcode
Slug
header-footer-elementor
Published
2024-11-07
Title
Elementor Header & Footer Builder < 1.6.46 - Author+ Stored XSS via SVG File Upload
Slug
header-footer-elementor
Published
2024-12-22
Title
Elementor Header & Footer Builder < 1.6.47 - Contributor+ Stored XSS via Page Title Widget
Slug
header-footer-elementor
Published
2025-08-01
Title
Ultimate Addons for Elementor < 2.4.7 - Subscriber+ Limited Settings Update
Slug
header-footer-elementor
Published
2025-09-15
Title
Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS
Slug
header-image-slider
Published
2024-03-29
Title
Header Image Slider <= 0.3 - Reflected Cross-Site Scripting