WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
header-footer-elementor
Published
2024-06-12
Title
Elementor Header & Footer Builder < 1.6.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title Widget
Slug
header-footer-elementor
Published
2024-07-01
Title
Elementor – Header, Footer & Blocks Template < 1.6.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
header-footer-elementor
Published
2024-10-23
Title
Elementor Header & Footer Builder < 1.6.44 - Authenticated (Contributor+) Information Disclosure via Shortcode
Slug
header-footer-elementor
Published
2024-11-07
Title
Elementor Header & Footer Builder < 1.6.46 - Author+ Stored XSS via SVG File Upload
Slug
header-footer-elementor
Published
2024-12-22
Title
Elementor Header & Footer Builder < 1.6.47 - Contributor+ Stored XSS via Page Title Widget
Slug
header-footer-elementor
Published
2025-08-01
Title
Ultimate Addons for Elementor < 2.4.7 - Subscriber+ Limited Settings Update
Slug
header-footer-elementor
Published
2025-09-15
Title
Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS
Slug
header-footer-elementor
Published
2026-07-21
Title
Ultimate Addons for Elementor < 2.9.2 - Contributor+ Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes
Slug
header-image-slider
Published
2024-03-29
Title
Header Image Slider <= 0.3 - Reflected Cross-Site Scripting
Slug
header-images-rotator
Published
2025-01-16
Title
ntp-header-images <= 1.2 - Reflected Cross-Site Scripting
Slug
headinger-elementor
Published
2025-12-31
Title
Headinger for Elementor <= 1.1.4 - Missing Authorization
Slug
headless-single-sign-on
Published
2026-08-12
Title
Headless Single Sign On < 1.6.1 - Unauthenticated PHP Object Injection
Slug
headline-analyzer
Published
2023-10-18
Title
Headline Analyzer < 1.3.2 - Missing Authorization via REST APIs
Slug
headline-analyzer
Published
2024-04-22
Title
Headline Analyzer < 1.3.4 - Cross-Site Request Forgery
Slug
headline-analyzer
Published
2025-10-19
Title
Headline Analyzer <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
health-check
Published
2019-01-25
Title
Health Check & Troubleshooting <= 1.2.3 - Authenticated Path Traversal
Slug
health-check
Published
2019-01-25
Title
Health Check & Troubleshooting <= 1.2.3 - Authenticated Lack of Authorisation
Slug
health-check
Published
2023-03-31
Title
Health Check & Troubleshooting < 1.6.0 - CSRF
Slug
health-check
Published
2022-12-05
Title
Health Check & Troubleshooting < 1.2.4 - Missing Authorization Checks
Slug
health-check
Published
2025-12-15
Title
Health Check & Troubleshooting <= 1.7.1 - Authenticated (Admin+) Path Traversal
Slug
heart-this
Published
2024-03-29
Title
HeartThis <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
heartland-management-terminal
Published
2025-01-16
Title
Heartland Management Terminal < 1.4.0 0 - Reflected Cross-Site Scripting
Slug
heat-trackr
Published
2016-10-21
Title
Heat Trackr <= 1.0 - XSS
Slug
heateor-login
Published
2025-09-09
Title
Heateor Login – Social Login Plugin < 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
heateor-social-comments
Published
2023-01-20
Title
Heateor Social Comments < 1.6.2 - Contributor+ Stored XSS