WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
insertify
Published
2024-12-11
Title
Insertify <= 1.1.4 - Cross-Site Request Forgery to Remote Code Execution
Slug
insight-core
Published
2021-12-28
Title
Insight Core <= 1.0 - Subscriber+ PHP Object Injection & Stored XSS
Slug
inspectlet-heatmaps-and-user-session-recording
Published
2025-08-14
Title
Inspectlet - User Session Recording and Heatmaps <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
inspirational-quote-rotator
Published
2021-11-15
Title
Inspirational Quote Rotator <= 1.0.0 - Admin+ Stored Cross-Site Scripting
Slug
insta-gallery
Published
2019-08-12
Title
WP Social Feed Gallery < 2.4.8 - CSRF & Missing Authorisation Checks
Slug
insta-gallery
Published
2024-08-01
Title
WP Social Feed Gallery < 4.4.0 - Missing Authorization
Slug
insta-gallery
Published
2025-10-24
Title
Social Feed Gallery < 4.9.3 - Missing Authorization to Unauthenticated Information Exposure
Slug
instabot
Published
2025-01-07
Title
Instabot <= 1.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
instagram-feed
Published
2016-11-19
Title
Instagram Feed < 1.4.7 - Authenticated Cross-Site Scripting (XSS) & CSRF
Slug
instagram-feed
Published
2018-01-18
Title
Instagram Feed < 1.6 - Cross-Site Scripting (XSS)
Slug
instagram-feed
Published
2019-02-04
Title
Instagram Feed < 1.12 - Unspecified Issues
Slug
instagram-feed
Published
2021-07-20
Title
Multiple Plugins from Smash Balloon - Reflected Cross-Site Scripting
Slug
instagram-feed
Published
2025-05-28
Title
Smash Balloon Instagram Feed < 6.9.1 - Contributor+ Stored XSS via `data-plugin` Attribute
Slug
instagram-for-wordpress
Published
2023-10-03
Title
Instagram for WordPress <= 2.1.6 - Contributor+ Stored XSS
Slug
instagram-slider-widget
Published
2021-03-14
Title
Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
instagram-slider-widget
Published
2022-08-01
Title
Social Slider Feed < 2.0.5 - Subscriber+ Arbitrary Feed Deletion
Slug
instagram-slider-widget
Published
2022-08-01
Title
Social Slider Feed < 2.0.5 - Subscriber+ Stored XSS via Feeds
Slug
instagram-slider-widget
Published
2022-08-01
Title
Social Slider Feed < 2.0.5 - Reflected Cross-Site Scripting
Slug
instagram-slider-widget
Published
2022-08-02
Title
Social Slider Feed < 2.0.6 - Admin+ Stored XSS via API Key
Slug
instagram-slider-widget
Published
2022-08-09
Title
Social Slider Feed < 2.0.7 - Admin+ Stored XSS via Feeds
Slug
instagram-slider-widget
Published
2022-08-01
Title
Social Slider Feed < 2.0.5 - Subscriber+ Arbitrary API Key Update to Stored XSS
Slug
instagram-slider-widget
Published
2024-08-09
Title
Social Slider Feed < 2.2.5 - Missing Authorization
Slug
instagram-slider-widget
Published
2024-09-27
Title
Social Slider Feed < 2.2.9 - Admin+ Stored XSS via Widgets
Slug
instagram-slider-widget
Published
2025-03-03
Title
Social Slider Feed < 2.2.9 - Admin+ Stored XSS
Slug
instagram-widget-by-wpzoom
Published
2024-04-12
Title
WPZOOM Social Feed Widget & Block < 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Instagram Image Deletion