WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ipages-flipbook-pro
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2022-12-16
Title
iPanorama 360 WordPress Virtual Tour Builder < 1.6.30 - Contributor+ Stored XSS
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2023-10-18
Title
iPanorama 360 – WordPress Virtual Tour Builder < 1.8.1 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2023-09-22
Title
iPanorama 360 – WordPress Virtual Tour Builder < 1.8.0 - Authenticated (Admin+) SQL injection
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2024-04-30
Title
iPanorama 360 WordPress Virtual Tour Builder < 1.8.2 - Missing Authorization
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2024-07-10
Title
iPanorama 360 WordPress Virtual Tour Builder < 1.8.4 - Missing Authorization
Slug
ipanorama-pro
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
ipaymu-for-woocommerce
Published
2026-01-06
Title
iPaymu Payment Gateway for WooCommerce < 2.0.3 - Missing Authentication to Unauthenticated Payment Bypass and Order Information Disclosure
Slug
ipblocklist
Published
2022-12-14
Title
ipBlockList <= 1.0 - CSRF
Slug
ipfeuilledechou
Published
2014-08-01
Title
ipfeuilledechou - SQL Injection
Slug
iphone-webclip-manager
Published
2024-11-23
Title
iPhone Webclip Manager <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ipospays-gateways-wc
Published
2026-02-07
Title
iPOSpays Gateways WC <= 1.3.7 - Missing Authorization
Slug
ipushpull
Published
2023-10-30
Title
Live updates from Excel < 2.3.3 - Contributor+ Stored Cross-Site Scripting
Slug
iq-block-country
Published
2015-08-24
Title
iQ Block Country < 1.1.20 - Reflected Cross-Site Scripting (XSS)
Slug
iq-block-country
Published
2021-07-17
Title
iQ Block Country < 1.2.12 - Admin+ Stored Cross-Site Scripting
Slug
iq-block-country
Published
2022-03-16
Title
iQ Block Country < 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip
Slug
iq-block-country
Published
2022-05-17
Title
iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing
Slug
iq-testimonials
Published
2024-07-08
Title
IQ Testimonials <= 2.2.7 - Unauthenticated Arbitrary File Upload
Slug
ird-slider
Published
2025-10-02
Title
Ird Slider <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
irecco-core
Published
2025-12-30
Title
iRecco Core <= 1.3.6 - Unauthenticated Local File Inclusion
Slug
irm-newsroom
Published
2025-06-12
Title
IRM Newsroom < 1.2.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmflat' Shortcode
Slug
irm-newsroom
Published
2025-06-12
Title
IRM Newsroom < 1.2.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmeventlist' Shortcode
Slug
irm-newsroom
Published
2025-06-12
Title
IRM Newsroom < 1.2.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmcalendarview' Shortcode
Slug
irobotstxt-seo
Published
2026-01-20
Title
iRobots.txt SEO <= 1.1.2 - Reflected Cross-Site Scripting