WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
instawp-connect
Published
2024-06-21
Title
InstaWP Connect < 0.1.0.39 - Unauthenticated Arbitrary File Upload
Slug
instawp-connect
Published
2024-07-10
Title
InstaWP Connect – 1-click WP Staging & Migration < 0.1.0.45 - Authentication Bypass to Admin
Slug
instawp-connect
Published
2025-03-13
Title
InstaWP Connect – 1-click WP Staging & Migration < 0.1.0.84 - Cross-Site Request Forgery to Local File Inclusion
Slug
instawp-connect
Published
2025-03-29
Title
InstaWP Connect < 0.1.0.83 - Unauthenticated Local File Inclusion
Slug
instawp-connect
Published
2025-04-10
Title
InstaWP Connect < 0.1.0.86 - Unauthenticated Local PHP File Inclusion
Slug
instawp-connect
Published
2025-12-12
Title
InstaWP Connect < 0.1.2.0 - Missing Authorization
Slug
instawp-connect
Published
2026-03-11
Title
InstaWP Connect < 0.1.2.7 - Missing Authorization
Slug
institute-management
Published
2026-02-18
Title
Institute Management <= 5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Enquiry Form Title' Setting
Slug
institutions-directory
Published
2023-03-06
Title
Multiple e-plugins - Subscriber+ Privilege Escalation
Slug
institutions-directory
Published
2025-08-30
Title
Institutions Directory < 1.3.4 - Reflected Cross-Site Scripting
Slug
institutions-directory
Published
2026-01-22
Title
Institutions Directory <= 1.3.4 - Missing Authorization
Slug
institutions-directory
Published
2026-01-22
Title
Institutions Directory <= 1.3..4 - Missing Authorization
Slug
institutions-directory
Published
2026-01-22
Title
Institutions Directory <= 1.3.4 - Subscriber+ Privilege Escalation
Slug
integracao-entre-eduzz-e-wc-powers
Published
2025-04-25
Title
Integração entre Eduzz e Woocommerce 1.5.0 - 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Slug
integracao-rd-station
Published
2022-09-11
Title
RD Station < 5.2.1 - Multiple CSRF
Slug
integracao-rd-station
Published
2024-09-04
Title
RD Station < 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
integracao-rd-station
Published
2026-06-04
Title
RD Station < 5.7.0 - Authenticated (Contributor+) Remote Code Execution
Slug
integrar-getnet-con-woo
Published
2023-07-07
Title
Getnet Argentina para Woocommerce < 0.0.5 - Unauthenticated Authorization Bypass
Slug
integrate-automate
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
integrate-automate
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
integrate-contact-form-7-and-aweber
Published
2025-06-19
Title
Contact Form 7 AWeber Extension < 0.1.43 - Missing Authorization
Slug
integrate-contact-form-7-and-aweber
Published
2025-11-07
Title
Contact Form 7 AWeber Extension < 0.1.43 - Missing Authorization to Authenticated (Subscriber+) Log Reset
Slug
integrate-dynamics-365-crm
Published
2025-10-03
Title
Integrate Dynamics 365 CRM < 1.1.0 - Missing Authorization
Slug
integrate-dynamics-365-crm
Published
2026-01-16
Title
Integrate Dynamics 365 CRM < 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Field Mapping Configuration
Slug
integrate-firebase
Published
2024-12-11
Title
Integrate Firebase < 0.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting