WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
infusionsoft-web-tracker
Published
2025-02-03
Title
Infusionsoft Analytics <= 2.0 - Cross-Site Request Forgery
Slug
injection-guard
Published
2025-07-24
Title
Injection Guard < 1.2.8 - Reflected XSS via $_SERVER['REQUEST_URI']
Slug
ink-official
Published
2024-10-21
Title
INK Official <= 4.1.2 - Authenticated (Contributor+) Arbitrary File Upload
Slug
inline-call-to-action-builder-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
inline-click-to-tweet
Published
2024-11-08
Title
Inline Click To Tweet <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
inline-footnotes
Published
2024-12-17
Title
Inline Footnotes <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
inline-frame-iframe
Published
2025-11-24
Title
Inline frame – Iframe <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
inline-google-spreadsheet-viewer
Published
2024-04-29
Title
Inline Google Spreadsheet Viewer <= 0.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
inline-stock-quotes
Published
2025-08-11
Title
Inline Stock Quotes <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock Shortcode
Slug
inline-svg-elementor
Published
2024-10-09
Title
Elementor Inline SVG <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
inline-text-popup
Published
2025-04-24
Title
Inline Text Popup <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
inline-tweet-sharer
Published
2023-02-15
Title
Inline Tweet Sharer < 2.6 - Admin+ Stored XSS
Slug
inline-tweets
Published
2025-01-07
Title
Inline Tweets <= 2.0 - Unauthenticated Stored Cross-Site Scripting
Slug
inlinkz-scripter
Published
2025-02-24
Title
EZ InLinkz linkup <= 0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
inlocation
Published
2025-02-03
Title
InLocation <= 1.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
innovs-hr-manager
Published
2023-11-29
Title
Innovs HR <= 1.0.3.4 - Reflected Cross-Site Scripting
Slug
innovs-hr-manager
Published
2024-02-20
Title
Innovs HR <= 1.0.3.4 - Employee Creation via CSRF
Slug
innovs-woo-manager
Published
2025-06-19
Title
WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily <= 1.2.4.5 - Missing Authorization
Slug
inpost-for-woocommerce
Published
2024-08-16
Title
InPost for WooCommerce <= 1.4.0 and InPost PL <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary File Read and Delete
Slug
inpost-gallery
Published
2016-10-18
Title
InPost Gallery <= 2.1.2 - LFI & Authenticated Stored XSS
Slug
inpost-gallery
Published
2022-11-28
Title
InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE
Slug
inpost-gallery
Published
2023-03-22
Title
InPost Gallery < 2.1.4.2 - Reflected XSS
Slug
inpost-gallery
Published
2024-11-25
Title
InPost Gallery < 2.1.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template
Slug
inpost-gallery
Published
2025-04-11
Title
InPost Gallery < 2.1.4.4 - Cross-Site Request Forgery
Slug
inpost-gallery
Published
2025-09-03
Title
InPost Gallery < 2.1.4.6 - Authenticated (Subscriber+) Local File Inclusion