WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
hk-filter-and-search
Published
2023-10-30
Title
HTML filter and csv-file search < 2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
hkdev-maintenance-mode
Published
2024-03-04
Title
Maintenance Mode < 3.0.2 - Unauthenticated Post/Page Content Disclosure
Slug
hkdev-maintenance-mode
Published
2024-04-22
Title
Maintenance Mode by helderk < 3.0.2 - Unauthenticated IP Spoofing
Slug
hl-twitter
Published
2024-04-24
Title
HL Twitter <= 2014.1.18 - Settings Update via CSRF
Slug
hl-twitter
Published
2024-04-24
Title
HL Twitter <= 2014.1.18 - Admin+ Stored XSS via Widget
Slug
hl-twitter
Published
2024-04-24
Title
HL Twitter <= 2014.1.18 - Unlink Twitter Account via CSRF
Slug
hm-cool-author-box-widget
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
hm-logo-showcase
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
hm-logo-showcase
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
hm-multiple-roles
Published
2021-07-20
Title
HM Multiple Roles < 1.3 - Arbitrary Role Change
Slug
hm-multiple-roles
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
hm-multiple-roles
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
hm-testimonial
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
hm-testimonial
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
hmapsprem
Published
2020-02-25
Title
Hero Maps Premium < 2.2.3 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
hms-testimonials
Published
2014-08-01
Title
HMS Testimonials 2.0.10 - CSRF
Slug
hms-testimonials
Published
2014-08-01
Title
HMS Testimonials 2.0.10 - XSS
Slug
holler-box
Published
2023-05-08
Title
HollerBox < 2.1.4 - Admin+ SQL Injection
Slug
holler-box
Published
2023-09-01
Title
HollerBox < 2.3.3 - Admin+ Stored XSS
Slug
homepage-pop-up
Published
2022-10-01
Title
Homepage Pop-up <= 1.2.5 - Admin+ Stored XSS
Slug
homepage-pop-up
Published
2022-11-01
Title
Homepage Pop-up <= 1.2.5 - CSRF
Slug
homepage-product-organizer-for-woocommerce
Published
2022-07-22
Title
Homepage Product Organizer for WooCommerce <= 1.1 - Subscriber+ SQLi
Slug
honeypot
Published
2021-02-08
Title
WP Amour < 1.5.7 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
honeypot
Published
2024-03-15
Title
WP Armour < 2.1.14 - Reflected XSS
Slug
honeypot-for-wp-comment
Published
2024-02-08
Title
Honeypot for WP Comment <= 2.2.3 - Directory Traversal to Unauthenticated Arbitrary File Deletion