WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
imageseo
Published
2024-07-23
Title
Optimize Images ALT Text (alt tag) & names for SEO using AI < 3.1.2 - Unauthenticated Full Path Disclosure
Slug
imaq-core
Published
2025-12-11
Title
IMAQ Core <= 1.2.1 - Cross-Site Request Forgery to URL Structure Update
Slug
imbachat-widget
Published
2024-11-20
Title
ImbaChat <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
imdb-info-box
Published
2022-05-09
Title
IMDB info box <= 2.0 - Admin+ Stored Cross-Site Scripting
Slug
imdb-widget
Published
2016-03-30
Title
IMDb Profile Widget <= 1.0.8 - Local File Inclusion (LFI)
Slug
imember360
Published
2014-04-24
Title
iMember360 < 3.9.001 - Multiple Issues
Slug
imgspider
Published
2024-07-03
Title
IMGspider < 2.3.11 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file'
Slug
imgspider
Published
2024-07-03
Title
IMGspider < 2.3.11 - Authenticated (Contributor+) Arbitrary File Upload via 'upload'
Slug
imgspider
Published
2026-01-06
Title
IMGspider <= 2.3.12 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
imithemes-listing
Published
2025-05-08
Title
IMITHEMES Listing < 3.4 - Unauthenticated Privilege Escalation via Unverified Password Reset
Slug
immocaster
Published
2025-07-28
Title
Immocaster WordPress <= 1.3.6 - Unauthenticated Local File Inclusion
Slug
immonex-kickstart
Published
2025-09-03
Title
immonex Kickstart < 1.11.13 - Authenticated (Contributor+) Local File Inclusion
Slug
immonex-kickstart
Published
2026-02-05
Title
immonex Kickstart < 1.13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
immonex-kickstart-team
Published
2025-09-22
Title
immonex Kickstart Team < 1.7.0 - Authenticated (Contributor+) Local File Inclusion
Slug
immotoolbox-connect
Published
2024-12-11
Title
ImmoToolBox Connect < 1.4.0 - Reflected Cross-Site Scripting
Slug
imoney
Published
2026-02-11
Title
iMoney <= 0.36 - Reflected Cross-Site Scripting
Slug
implied-cookie-consent
Published
2025-02-02
Title
Implied Cookie Consent <= 1.3 - Reflected Cross-Site Scripting
Slug
import-cdn-remote-images
Published
2025-07-16
Title
Import CDN-Remote Images < 2.1.3 - Cross-Site Request Forgery
Slug
import-csv-files
Published
2022-06-21
Title
Import CSV Files <= 1.0 - Reflected Cross-Site Scripting
Slug
import-eventbrite-events
Published
2024-12-13
Title
Import Eventbrite Events < 1.7.5 - Reflected Cross-Site Scripting
Slug
import-export-for-woocommerce
Published
2024-12-06
Title
Import Export For WooCommerce <= 1.6.2 - Subscriber+ Arbitrary File Upload
Slug
import-export-for-woocommerce
Published
2025-05-16
Title
Import Export For WooCommerce <= 1.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
import-export-for-woocommerce
Published
2025-11-03
Title
Import Export For WooCommerce <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
import-export-with-custom-rest-api
Published
2025-06-12
Title
REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation via process_handler Function
Slug
import-external-attachments
Published
2025-06-27
Title
Import external attachments <= 1.5.12 - Cross-Site Request Forgery