WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
infusionsoft
Published
2014-04-25
Title
Infusionsoft Gravity Forms Add-on < 1.5.7 - Unauthenticated Reflected XSS
Slug
infusionsoft-landing-pages
Published
2023-09-29
Title
Keap Landing Pages <= 1.4.2 - Settings Update via CSRF
Slug
infusionsoft-official-opt-in-forms
Published
2023-12-21
Title
Keap Official Opt-in Forms < 1.0.12 - Admin+ Stored XSS
Slug
infusionsoft-official-opt-in-forms
Published
2024-01-03
Title
Keap Official Opt-in Forms <= 2.0.3 - Contributor+ Stored XSS
Slug
infusionsoft-official-opt-in-forms
Published
2024-09-30
Title
Keap Official Opt-in Forms <= 2.0.3 - Contributor+ Stored XSS
Slug
infusionsoft-official-opt-in-forms
Published
2025-02-17
Title
Keap Official Opt-in Forms < 2.0.2 - Unauthenticated Limited Local File Inclusion
Slug
infusionsoft-web-form-javascript
Published
2025-03-31
Title
Infusionsoft Web Form JavaScript <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
infusionsoft-web-tracker
Published
2025-02-03
Title
Infusionsoft Analytics <= 2.0 - Cross-Site Request Forgery
Slug
injection-guard
Published
2025-07-24
Title
Injection Guard < 1.2.8 - Reflected XSS via $_SERVER['REQUEST_URI']
Slug
injection-guard
Published
2026-03-20
Title
Injection Guard < 1.3.0 - Unauthenticated Stored Cross-Site Scripting via Query Parameter Name
Slug
ink-official
Published
2024-10-21
Title
INK Official <= 4.1.2 - Authenticated (Contributor+) Arbitrary File Upload
Slug
inline-call-to-action-builder-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
inline-click-to-tweet
Published
2024-11-08
Title
Inline Click To Tweet <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
inline-footnotes
Published
2024-12-17
Title
Inline Footnotes <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
inline-frame-iframe
Published
2025-11-24
Title
Inline frame – Iframe <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
inline-google-spreadsheet-viewer
Published
2024-04-29
Title
Inline Google Spreadsheet Viewer <= 0.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
inline-stock-quotes
Published
2025-08-11
Title
Inline Stock Quotes <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock Shortcode
Slug
inline-svg-elementor
Published
2024-10-09
Title
Elementor Inline SVG <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
inline-text-popup
Published
2025-04-24
Title
Inline Text Popup <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
inline-tweet-sharer
Published
2023-02-15
Title
Inline Tweet Sharer < 2.6 - Admin+ Stored XSS
Slug
inline-tweets
Published
2025-01-07
Title
Inline Tweets <= 2.0 - Unauthenticated Stored Cross-Site Scripting
Slug
inlinkz-scripter
Published
2025-02-24
Title
EZ InLinkz linkup <= 0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
inlocation
Published
2025-02-03
Title
InLocation <= 1.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
innovs-hr-manager
Published
2023-11-29
Title
Innovs HR <= 1.0.3.4 - Reflected Cross-Site Scripting
Slug
innovs-hr-manager
Published
2024-02-20
Title
Innovs HR <= 1.0.3.4 - Employee Creation via CSRF