WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
internal-links
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
internal-links-generator
Published
2025-01-16
Title
Internal Links Generator <= 3.51 - Reflected Cross-Site Scripting
Slug
internallink-audit
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
interview
Published
2025-05-16
Title
Interview <= 1.01 - Authenticated (Contributor+) SQL Injection
Slug
intimate-io-cryptocurrency-payments
Published
2021-06-30
Title
Intimate Payments <= 1.3.1 - CSRF Bypass
Slug
intl-datetime-calendar
Published
2025-08-15
Title
Intl DateTime Calendar <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter
Slug
intouch
Published
2014-08-01
Title
intouch 2.0 - intouch.js.php intouch_failure Parameter Reflected XSS
Slug
intuitive-custom-post-order
Published
2023-01-24
Title
Intuitive Custom Post Order < 3.1.4 - Arbitrary Menu Order Update via CSRF
Slug
intuitive-custom-post-order
Published
2023-01-24
Title
Intuitive Custom Post Order < 3.1.4 - Subscriber+ Arbitrary Menu Order Update
Slug
intuitive-custom-post-order
Published
2023-01-25
Title
Intuitive Custom Post Order < 3.1.5 - Admin+ SQLi
Slug
invelity-mygls-connect
Published
2025-09-05
Title
Invelity MyGLS connect <= 1.1.1 - Cross-Site Request Forgery
Slug
invelity-products-feeds
Published
2026-03-20
Title
Invelity Products Feeds <= 1.2.6 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
invelity-sps-connect
Published
2025-12-26
Title
Invelity SPS connect <= 1.0.8 - Reflected Cross-Site Scripting
Slug
inventory-presser
Published
2025-06-19
Title
Inventory Presser < 15.2.7 - Admin+ Stored XSS
Slug
inventorypress
Published
2023-06-23
Title
InventoryPress <= 1.7 - Author+ Stored XSS
Slug
investi
Published
2026-04-07
Title
Investi < 1.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'maximum-num-years' Shortcode Attribute
Slug
invisible-optin
Published
2025-08-25
Title
Invisible Optin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
invit0r
Published
2014-08-01
Title
Invit0r 0.22 - Shell Upload
Slug
invitation-based-registrations
Published
2022-07-05
Title
Invitation Based Registrations <= 2.2.84 - Admin+ Stored Cross-Site Scripting
Slug
invitation-code-content-access
Published
2024-03-20
Title
Invitation Code Content Restriction Plugin from CreativeMinds < 1.5.5 - Reflected Cross-Site Scripting
Slug
invite-anyone
Published
2017-03-17
Title
Invite Anyone <= 1.3.14 - Change of Email Invitation Content
Slug
invite-anyone
Published
2017-10-12
Title
Invite Anyone <= 1.3.18 - Unauthenticated PHP Object Injection
Slug
invite-anyone
Published
2017-03-22
Title
Invite Anyone < 1.3.16 - Multiple Issues
Slug
invite-anyone
Published
2024-08-16
Title
Invite Anyone < 1.4.8 - Reflected Cross-Site Scripting
Slug
invition-print-ship
Published
2025-08-27
Title
Printeers Print & Ship <= 1.17.0 - Unauthenticated Path Traversal