WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
invoicing
Published
2024-08-28
Title
GetPaid < 2.8.12 - Missing Authorization via column_subscription()
Slug
invoicing
Published
2026-06-08
Title
Payment forms, Buy now buttons, and Invoicing System | GetPaid < 2.8.50 - Unauthenticated Information Exposure
Slug
invoicing
Published
2026-07-13
Title
GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification
Slug
invoicing
Published
2026-07-31
Title
Payment forms, Buy now buttons, and Invoicing System | GetPaid < 2.8.57 - Authenticated (Administrator+) Local File Inclusion via Payment Form 'type' Element Field
Slug
invoicing
Published
2026-10-26
Title
Payment forms, Buy now buttons, and Invoicing System | GetPaid < 2.8.63 - Unauthenticated Stored Cross-Site Scripting
Slug
invoicing
Published
2026-10-16
Title
Payment forms, Buy now buttons, and Invoicing System | GetPaid < 2.8.62 - Unauthenticated Stored Cross-Site Scripting via 'mmdwqzpoxadd' Parameter
Slug
io-engagement-analytics
Published
2026-06-29
Title
Plugin for Google Analytics by IO technologies <= 1.1 - Cross-Site Request Forgery via 'ga_id' Parameter
Slug
ioncube-tester-plus
Published
2026-03-04
Title
ionCube Tester Plus < 1.4 - Unauthenticated Arbitrary File Download
Slug
ione360-configurator
Published
2025-04-10
Title
iONE360 configurator <= 2.0.57 - Reflected Cross-Site Scripting
Slug
ione360-configurator
Published
2026-02-10
Title
iONE360 configurator <= 2.0.57 - Unauthenticated Stored Cross-Site Scripting via Contact Form Parameters
Slug
ip-address-blocker
Published
2019-06-15
Title
IP Address Blocker < 10.5 - CSRF leading to Arbitrary File Upload
Slug
ip-address-blocker
Published
2023-03-28
Title
IP Blocker Lite <= 11.1.1 - Cross-Site Request Forgery
Slug
ip-address-blocker
Published
2024-03-28
Title
IP Blocker Lite <= 11.1.1 - IP Spoofing
Slug
ip-based-login
Published
2025-03-04
Title
IP Based Login < 2.4.1 - Log Deletion via CSRF
Slug
ip-based-login
Published
2024-11-14
Title
IP Based Login < 2.4.1 - Admin+ Stored XSS
Slug
ip-based-login
Published
2025-06-19
Title
IP Based Login < 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ip-based-login
Published
2025-09-22
Title
IP Based Login < 2.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ip-blacklist-cloud
Published
2015-02-26
Title
IP Blacklist Cloud <= 3.4 - SQL Injection
Slug
ip-blacklist-cloud
Published
2015-03-13
Title
IP Blacklist Cloud < 3.43 - Admin+ Arbitrary File Disclosure
Slug
ip-blacklist-cloud
Published
2022-10-24
Title
IP Blacklist Cloud Plugin <= 5.00 - Admin+ SQLi
Slug
ip-blacklist-cloud
Published
2022-10-24
Title
IP Blacklist Cloud Plugin <= 5.00 - Admin+ Stored XSS
Slug
ip-loc8
Published
2024-10-09
Title
IP Loc8 <= 1.1 - Unauthenticated PHP Object Injection
Slug
ip-locator
Published
2025-03-27
Title
IP Locator < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ip-logger
Published
2014-08-01
Title
IP-Logger <= 3.0 - SQL Injection
Slug
ip-metaboxes
Published
2023-05-25
Title
IP Metaboxes <= 2.1.1 - Admin+ Stored XSS