WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
integration-for-contact-form-7-and-google-sheets
Published
2025-03-27
Title
Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms < 1.1.0 - Cross-Site Request Forgery
Slug
integration-for-contact-form-7-and-google-sheets
Published
2025-07-18
Title
Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms < 1.1.2 - Unauthenticated PHP Object Injection via verify_field_val Function
Slug
integration-for-contact-form-7-and-pipedrive
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
integration-for-contact-form-7-and-pipedrive
Published
2024-05-09
Title
Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms < 1.2.1 - Cross-Site Request Forgery
Slug
integration-for-contact-form-7-and-pipedrive
Published
2025-07-18
Title
Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms < 1.2.4 - Unauthenticated PHP Object Injection via verify_field_val Function
Slug
integration-for-gravity-forms-and-pipedrive
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
integration-for-szamlazz-hu-gravity-forms
Published
2022-09-14
Title
Multiple Plugins from Viszt Peter - Multiple CSRF
Slug
integration-for-szamlazzhu-woocommerce
Published
2022-09-14
Title
Multiple Plugins from Viszt Peter - Multiple CSRF
Slug
integration-of-capsule-crm-for-contact-form-7
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
integration-of-capsule-crm-for-contact-form-7
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
integration-of-zoho-crm-and-contact-form-7
Published
2025-04-01
Title
Integration of Zoho CRM and Contact Form 7 <= 1.0.7 - Open Redirect
Slug
integrations-of-zoho-crm-with-elementor-form
Published
2025-05-07
Title
Integrations of Zoho CRM with Elementor form <= 1.0.8 - Open Redirect
Slug
integromat-connector
Published
2025-09-03
Title
Make Connector < 1.6.0 - Authenticated (Administrator+) Arbitrary File Upload
Slug
intelligence
Published
2024-07-26
Title
Intelligence <= 1.4.0 - Unauthenticated Full Path Disclosure
Slug
intelligent-importer
Published
2025-01-14
Title
Catalog Importer, Scraper & Crawler < 5.1.4 - Reflected Cross-Site Scripting
Slug
intelligent-importer
Published
2025-09-10
Title
Catalog Importer, Scraper & Crawler <= 5.1.4 - Unauthenticated PHP Code Injection
Slug
intelliwidget-elements
Published
2024-11-08
Title
IntelliWidget Elements <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
intelly-posts-footer-manager
Published
2025-01-14
Title
Posts Footer Manager < 2.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
intelly-posts-footer-manager
Published
2025-04-04
Title
Posts Footer Manager <= 2.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
intelly-related-posts
Published
2021-10-09
Title
Inline Related Posts < 3.0.5 - Admin+ Cross-Site Scripting
Slug
intelly-related-posts
Published
2024-03-16
Title
Inline Related Posts < 3.5.0 - Admin+ Stored XSS
Slug
intelly-related-posts
Published
2024-03-21
Title
Inline Related Posts < 3.6.0 - Subscriber+ Password Protected Post Read
Slug
intelly-related-posts
Published
2024-04-10
Title
Inline Related Posts < 3.4.0 - Tracking Toggle via CSRF
Slug
intelly-related-posts
Published
2024-06-21
Title
Inline Related Posts < 3.7.0 - Reflected XSS
Slug
intelly-related-posts
Published
2024-07-08
Title
Inline Related Posts < 3.8.0 - Admin+ Stored XSS