WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
icestats
Published
2024-11-22
Title
IceStats <= 1.3 - Cross-Site Request Forgery
Slug
ichart
Published
2024-12-09
Title
iChart – Easy Charts and Graphs < 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Slug
icon
Published
2024-03-25
Title
Web Icons < 1.0.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
icon
Published
2024-03-28
Title
Web Icons < 1.0.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
icon-list-block
Published
2025-02-23
Title
Icon List Block < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
icon-list-block
Published
2025-11-18
Title
Icon List Block – Add Icon-Based Lists with Custom Styles < 1.2.2 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
icon-widget
Published
2023-01-03
Title
Icon Widget < 1.3.0 - Contributor+ Stored XSS via Shortcode
Slug
icon-widget
Published
2024-04-19
Title
Icon Widget < 1.4.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Slug
icon-widget-with-links
Published
2024-11-08
Title
Icon Widget <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
iconic-woothumbs
Published
2024-03-16
Title
WooThumbs for WooCommerce by Iconic < 5.5.4 - Reflected Cross-Site Scripting
Slug
iconize
Published
2024-09-30
Title
Iconize <= 1.2.4 - Authenticated (Admin+) Remote Code Execution
Slug
icons-enricher
Published
2025-01-07
Title
Icons Enricher <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
icons-factory
Published
2025-08-14
Title
Icons Factory <= 1.6.12 - Unauthenticated Arbitrary File Deletion
Slug
icons-font-loader
Published
2023-11-06
Title
Icons Font Loader < 1.1.2.1 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Slug
icons-font-loader
Published
2023-11-01
Title
Icons Font Loader < 1.1.3 - Admin+ Arbitrary File Upload
Slug
icons-font-loader
Published
2024-01-31
Title
Icons Font Loader < 1.1.5 - Authenticated(Administrator+) Arbitrary File Upload
Slug
icons-with-links-widget
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
icount
Published
2025-06-27
Title
iCount Payment Gateway <= 2.0.6 - Missing Authorization
Slug
ics-button
Published
2025-01-07
Title
ICS Button <= 0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ics-calendar
Published
2023-10-23
Title
ICS Calendar < 10.12.0.2 - Authenticated(Contributor+) Directory Traversal via _url_get_contents
Slug
icustomizer
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
idbbee
Published
2023-10-30
Title
idbbee <= 1.0 - Contributor+ Stored Cross-Site Scripting
Slug
idcrm-contacts-companies
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ideal-interactive-map
Published
2024-01-03
Title
Ideal Interactive Map <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ideal-wp-login-logo-changer
Published
2025-03-27
Title
Custom Login Logo < 1.1.8 - Cross-Site Request Forgery