WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
image-map-pro-lite
Published
2023-06-26
Title
Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite < 1.0.0 - CSRF to Stored XSS
Slug
image-mapper
Published
2024-12-16
Title
Image Mapper <= 0.2.5.3 - Reflected Cross-Site Scripting
Slug
image-metadata-cruncher
Published
2015-02-22
Title
Image Metadata Cruncher - Multiple Cross-Site Scripting (XSS)
Slug
image-optimization
Published
2026-02-20
Title
Image Optimizer by Elementor < 1.7.2 - Missing Authorization
Slug
image-optimization
Published
2026-07-01
Title
Image Optimizer < 1.7.5 - Author+ Arbitrary File Deletion via Post Meta Field Injection
Slug
image-optimizer-wd
Published
2023-04-26
Title
Image Optimizer by 10web < 1.0.27 - Reflected Cross-Site Scripting
Slug
image-optimizer-wd
Published
2023-05-02
Title
Image Optimizer by 10web < 1.0.27 - Admin+ Path Traversal
Slug
image-optimizer-wpssk
Published
2025-12-04
Title
Image Optimizer by wps.sk <= 1.2.0 - Cross-Site Request Forgery to Bulk Image Optimization
Slug
image-over-image-vc-extension
Published
2023-03-08
Title
Image Over Image For WPBakery Page Builder < 3.0 - Contributor+ Stored XSS
Slug
image-protector
Published
2023-06-19
Title
Image Protector <= 1.1 - Admin+ Stored Cross-Site Scripting
Slug
image-regenerate-select-crop
Published
2023-10-09
Title
Image Regenerate & Select Crop < 7.3.1 - Sensitive Information Exposure
Slug
image-resizer-on-the-fly
Published
2025-06-13
Title
Image Resizer On The Fly <= 1.1 - Unauthenticated Arbitrary File Deletion
Slug
image-shadow
Published
2025-06-23
Title
Image Shadow <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
image-sizes
Published
2026-07-01
Title
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More < 6.3.3 - Missing Authorization
Slug
image-sizes
Published
2026-06-29
Title
ThumbPress < 6.2.2 - Subscriber+ Plugin Deactivation
Slug
image-sizes
Published
2026-08-17
Title
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More < 6.5 - Missing Authorization
Slug
image-sizes-controller
Published
2025-06-19
Title
Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes <= 1.0.10 - Missing Authorization
Slug
image-sizes-on-demand
Published
2026-06-23
Title
Image Sizes on Demand <= 1.3 - Reflected Cross-Site Scripting via PHP_SELF Server Variable
Slug
image-slider-slideshow
Published
2026-01-07
Title
Image Slider Slideshow <= 1.8 - Authenticated (Contributor+) Insecure Direct Object Reference
Slug
image-slider-widget
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
image-slider-widget
Published
2016-12-23
Title
Slider <= 1.1.89 - Authenticated Arbitrary File Deletion
Slug
image-slider-widget
Published
2022-06-30
Title
Image Slider < 1.1.123 - Arbitrary Post Duplication via CSRF
Slug
image-slider-widget
Published
2024-04-22
Title
Image Slider < 1.1.127 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
image-slider-with-description
Published
2014-08-01
Title
Image slider with description - Unspecified
Slug
image-slider-with-description
Published
2025-06-27
Title
Image Slider With Description <= 9.2 - Cross-Site Request Forgery