WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
iframe
Published
2015-08-11
Title
iframe < 4.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
iframe
Published
2015-08-11
Title
iframe < 4.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
iframe
Published
2020-05-07
Title
Iframe < 4.5 - Authenticated Stored Cross Site Scripting (XSS)
Slug
iframe
Published
2023-09-25
Title
iframe < 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'iframe' Shortcode
Slug
iframe
Published
2023-12-28
Title
iFrame < 4.9 - Contributor+ Stored XSS
Slug
iframe
Published
2024-05-14
Title
iframe < 5.1 - Contributor+ Stored XSS
Slug
iframe
Published
2024-05-22
Title
iframe < 5.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Slug
iframe-admin-pages
Published
2014-08-01
Title
IFrame Admin Pages <= 0.1 - Cross Site Scripting
Slug
iframe-block
Published
2025-08-19
Title
iFrame Block <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
iframe-forms
Published
2023-10-30
Title
iframe forms <= 1.0 - Contributor+ Stored Cross-Site Scripting
Slug
iframe-popup
Published
2023-05-12
Title
Iframe Popup <= 3.3 - Admin+ Stored XSS
Slug
iframe-shortcode
Published
2023-12-19
Title
iframe Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
iframe-to-embed
Published
2025-01-07
Title
iframe to embed <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
iframe-widget
Published
2025-06-05
Title
IFrame Widget <= 4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
iframe-wrapper
Published
2025-08-18
Title
iframe Wrapper <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ig-shortcodes
Published
2025-03-24
Title
IG Shortcodes <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
igit-related-posts-with-thumb-images-after-posts
Published
2025-05-02
Title
IGIT Related Posts With Thumb Image After Posts <= 4.5.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
igniteup
Published
2019-11-10
Title
IgniteUp < 3.4.1 - Multiple Issues
Slug
igniteup
Published
2022-04-13
Title
IgniteUp <= 3.4.1 - Admin+ Stored Cross-Site Scripting
Slug
ignitiondeck
Published
2014-08-01
Title
IgnitionDeck 1.1 - Purchase Form Unspecified XSS
Slug
ignitiondeck
Published
2024-07-26
Title
IgnitionDeck Crowdfunding Platform < 1.10.0 - Missing Authorization
Slug
ignitiondeck
Published
2025-10-04
Title
IgnitionDeck <= 2.0.10 - Missing Authorization
Slug
igumbi-online-booking
Published
2025-02-20
Title
igumbi Online Booking < 1.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
iks-menu
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
iks-menu
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting