WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ip-metaboxes
Published
2023-05-25
Title
IP Metaboxes <= 2.1.1 - Unauthenticated Reflected XSS
Slug
ip-vault-wp-firewall
Published
2023-02-02
Title
IP Vault - WP Firewall < 2.1 - Admin+ Stored XSS
Slug
ip-vault-wp-firewall
Published
2024-08-30
Title
IP Vault – WP Firewall < 2.1 - IP Address Spoofing to Protection Mechanism Bypass
Slug
ip-vault-wp-firewall
Published
2026-05-26
Title
Two-factor authentication (formerly IP Vault) <= 2.1 - Cross-Site Request Forgery to Settings Update
Slug
ip2location-country-blocker
Published
2022-01-06
Title
IP2Location Country Blocker < 2.26.5 - Ban Bypass
Slug
ip2location-country-blocker
Published
2022-02-04
Title
IP2Location Country Blocker < 2.26.9 - Admin+ Stored Cross-Site Scripting
Slug
ip2location-country-blocker
Published
2022-01-06
Title
IP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRF
Slug
ip2location-country-blocker
Published
2022-01-06
Title
IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban
Slug
ip2location-country-blocker
Published
2024-01-17
Title
IP2Location Country Blocker < 2.33.4 - Unauthenticated Sensitive Information Exposure via Debug Log File
Slug
ip2location-country-blocker
Published
2024-04-12
Title
Download IP2Location Country Blocker < 2.34.3 - Cross-Site Request Forgery
Slug
ip2location-country-blocker
Published
2025-01-24
Title
Download IP2Location Country Blocker < 2.38.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ip2location-country-blocker
Published
2025-02-21
Title
IP2Location Country Blocker < 2.38.9 - Unauthenticated Information Disclosure
Slug
ip2location-country-blocker
Published
2026-09-09
Title
IP2Location Country Blocker < 2.45.0 - Unauthenticated IP Block Bypass via IP Spoofing
Slug
ip2location-redirection
Published
2025-02-28
Title
IP2Location Redirection < 1.33.4 - Missing Authorization to Unauthenticated Settings Export
Slug
ip2location-variables
Published
2025-04-17
Title
IP2Location Variables < 2.9.6 - Cross-Site Request Forgery
Slug
ip2location-world-clock
Published
2025-04-09
Title
IP2Location World Clock < 1.1.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ipages-flipbook
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
ipages-flipbook
Published
2022-12-16
Title
iPages Flipbook For WordPress < 1.4.7 - Contributor+ Stored XSS
Slug
ipages-flipbook
Published
2023-11-03
Title
iPages Flipbook < 1.5.0 - Authenticated (Administrator+) SQL Injection
Slug
ipages-flipbook
Published
2024-04-29
Title
iPages Flipbook < 1.5.2 - Missing Authorization
Slug
ipages-flipbook-pro
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2021-10-11
Title
Multiple Plugins from Avirtum - Reflected Cross-Site Scripting
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2022-12-16
Title
iPanorama 360 WordPress Virtual Tour Builder < 1.6.30 - Contributor+ Stored XSS
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2023-10-18
Title
iPanorama 360 – WordPress Virtual Tour Builder < 1.8.1 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
ipanorama-360-virtual-tour-builder-lite
Published
2023-09-22
Title
iPanorama 360 – WordPress Virtual Tour Builder < 1.8.0 - Authenticated (Admin+) SQL injection