WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
imagemapper
Published
2023-11-06
Title
ImageMapper <= 1.2.6 - Stored XSS via CSRF
Slug
imagemapper
Published
2023-11-06
Title
ImageMapper <= 1.2.6 - Settings Update via CSRF
Slug
imagements
Published
2021-04-08
Title
Imagements <= 1.2.5 - Unauthenticated Arbitrary File Upload to RCE
Slug
imagemeta
Published
2025-01-16
Title
ImageMeta <= 1.1.2 - Reflected Cross-Site Scripting
Slug
imagenius
Published
2025-01-16
Title
imaGenius <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
imager-elementor
Published
2025-12-09
Title
Imager for Elementor <= 2.0.4 - Missing Authorization
Slug
imagerecycle-pdf-image-compression
Published
2023-08-11
Title
ImageRecycle pdf & image compression < 3.1.12 - Reflected XSS
Slug
imagerecycle-pdf-image-compression
Published
2023-08-11
Title
ImageRecycle pdf & image compression < 3.1.11 - Reflected XSS
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Cross-Site Request Forgery to Settings Update in enableOptimization
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Missing Authorization to Settings Update in enableOptimization
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Cross-Site Request Forgery to Settings Update in disableOptimization
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Missing Authorization to Settings Update in disableOptimization
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Cross-Site Request Forgery to Plugin Data Removal in reinitialize
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Missing Authorization to Plugin Data Removal in reinitialize
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Cross-Site Request Forgery to Settings Update in stopOptimizeAll
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Missing Authorization to Settings Update in optimizeAllOn
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Cross-Site Request Forgery to Settings Update in optimizeAllOn
Slug
imagerecycle-pdf-image-compression
Published
2024-02-07
Title
ImageRecycle pdf & image compression < 3.1.14 - Missing Authorization to Settings Update in stopOptimizeAll
Slug
imagerecycle-pdf-image-compression
Published
2024-08-23
Title
ImageRecycle pdf & image compression < 3.1.15 - Cross-Site Request in Several AJAX Actions
Slug
imagerecycle-pdf-image-compression
Published
2024-08-23
Title
ImageRecycle pdf & image compression < 3.1.15 - Missing Authorization in Several AJAX Actions
Slug
imagerecycle-pdf-image-compression
Published
2024-12-10
Title
ImageRecycle pdf & image compression < 3.1.17 - Reflected Cross-Site Scripting
Slug
images-asynchronous-load
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
images-lazyload-and-slideshow
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
images-optimize-and-upload-cf7
Published
2022-12-21
Title
Images Optimize and Upload CF7 < 2.2.1 - Unauthenticated Arbitrary File Deletion
Slug
images-optimizer
Published
2025-02-02
Title
Plugin A/B Image Optimizer <= 3.3 - Authenticated (Subscriber+) Arbitrary File Download