WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
improved-sale-badges
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
improved-sale-badges-free-version
Published
2025-01-16
Title
Improved Sale Badges – Free Version <= 1.0.1 - Authenticated (Subscriber+) Local File Inclusion
Slug
improved-user-search-in-backend
Published
2014-09-19
Title
Improved User Search in Backend < 1.2.6 - CSRF & XSS
Slug
improved-variable-product-attributes
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
ims-countdown
Published
2024-12-13
Title
IMS Countdown < 1.3.6 - Contributor+ Stored XSS
Slug
in-stock-mailer-for-woocommerce
Published
2025-03-11
Title
In Stock Mailer for WooCommerce <= 2.1.1 - Reflected Cross-Site Scripting
Slug
inactive-logout
Published
2023-09-20
Title
Inactive Logout < 3.2.3 - Missing Authorization
Slug
inactive-logout
Published
2023-09-20
Title
Inactive Logout < 3.2.3 - Cross-Site Request Forgery
Slug
inactive-logout
Published
2025-10-31
Title
Inactive Logout < 3.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
inactive-user-deleter
Published
2023-07-17
Title
Inactive User Deleter < 1.60 - Cross-Site Request Forgery
Slug
inavii-social-feed-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
inazo-advanced-ads-management
Published
2016-09-06
Title
Advanced ads Management <= 1.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
inbound-brew
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
inbound-brew
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
inbound-brew
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
inboundio-marketing
Published
2015-03-24
Title
InBoundio Marketing Plugin <= 2.0.3 - Shell Upload
Slug
inboxify-sign-up-form
Published
2025-12-26
Title
Inboxify Sign Up Form <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
include-file
Published
2025-03-24
Title
include-file <= 1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
include-file
Published
2025-04-03
Title
include-file <= 1 - Authenticated (Contributor+) Arbitrary File Download
Slug
include-fussball-de-widgets
Published
2024-09-30
Title
Include Fussball.de Widgets <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
include-fussball-de-widgets
Published
2025-11-10
Title
Include fussball.de Widgets <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'api' and 'type'
Slug
include-lottie-animation-for-elementor
Published
2024-05-23
Title
LottieFiles – JSON Based Animation Lottie & Bodymovin for Elementor < 1.10.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
include-mastodon-feed
Published
2024-11-20
Title
Include Mastodon Feed < 1.9.6 - Contributor+ Stored XSS
Slug
include-mastodon-feed
Published
2025-02-03
Title
Include Mastodon Feed < 1.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
include-me
Published
2021-06-21
Title
Include Me <= 1.2.1 - Authenticated Remote Code Execution (RCE) via LFI log poisoning