WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
integrate-google-drive
Published
2025-11-04
Title
File Manager for Google Drive – Integrate Google Drive with WordPress < 1.5.4 - Unauthenticated Sensitive Information Exposure
Slug
integrate-google-drive
Published
2026-01-24
Title
Integrate Google Drive <= 1.5.6 - Missing Authorization
Slug
integration-cds
Published
2025-07-23
Title
Dataverse Integration 2.77 - 2.81 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route
Slug
integration-dynamics
Published
2024-05-07
Title
Dynamics 365 Integration < 1.3.18 - Unauthenticated Sensitive Information Exposure
Slug
integration-dynamics
Published
2025-01-03
Title
Dynamics 365 Integration < 1.3.24 - Contributor+ RCE and Arbitrary File Read
Slug
integration-for-billingo-gravity-forms
Published
2022-09-14
Title
Multiple Plugins from Viszt Peter - Multiple CSRF
Slug
integration-for-contact-form-7-and-google-sheets
Published
2025-03-27
Title
Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms < 1.1.0 - Cross-Site Request Forgery
Slug
integration-for-contact-form-7-and-google-sheets
Published
2025-07-18
Title
Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms < 1.1.2 - Unauthenticated PHP Object Injection via verify_field_val Function
Slug
integration-for-contact-form-7-and-pipedrive
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
integration-for-contact-form-7-and-pipedrive
Published
2024-05-09
Title
Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms < 1.2.1 - Cross-Site Request Forgery
Slug
integration-for-contact-form-7-and-pipedrive
Published
2025-07-18
Title
Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms < 1.2.4 - Unauthenticated PHP Object Injection via verify_field_val Function
Slug
integration-for-gravity-forms-and-pipedrive
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
integration-for-szamlazz-hu-gravity-forms
Published
2022-09-14
Title
Multiple Plugins from Viszt Peter - Multiple CSRF
Slug
integration-for-szamlazzhu-woocommerce
Published
2022-09-14
Title
Multiple Plugins from Viszt Peter - Multiple CSRF
Slug
integration-of-capsule-crm-for-contact-form-7
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
integration-of-capsule-crm-for-contact-form-7
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
integration-of-zoho-crm-and-contact-form-7
Published
2025-04-01
Title
Integration of Zoho CRM and Contact Form 7 <= 1.0.7 - Open Redirect
Slug
integration-with-hubspot-forms
Published
2026-03-20
Title
Integration with Hubspot Forms <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
integrations-of-zoho-crm-with-elementor-form
Published
2025-05-07
Title
Integrations of Zoho CRM with Elementor form <= 1.0.8 - Open Redirect
Slug
integrio-core
Published
2026-04-07
Title
Integrio Core < 1.2.8 - Unauthenticated Local File Inclusion
Slug
integromat-connector
Published
2025-09-03
Title
Make Connector < 1.6.0 - Authenticated (Administrator+) Arbitrary File Upload
Slug
intelligence
Published
2024-07-26
Title
Intelligence <= 1.4.0 - Unauthenticated Full Path Disclosure
Slug
intelligent-importer
Published
2025-01-14
Title
Catalog Importer, Scraper & Crawler < 5.1.4 - Reflected Cross-Site Scripting
Slug
intelligent-importer
Published
2025-09-10
Title
Catalog Importer, Scraper & Crawler <= 5.1.4 - Unauthenticated PHP Code Injection
Slug
intelliwidget-elements
Published
2024-11-08
Title
IntelliWidget Elements <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting