WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ilc-thickbox
Published
2024-08-22
Title
ILC Thickbox <= 1.0 - Settings update via CSRF
Slug
ilive
Published
2019-06-25
Title
iLive <= 1.0.4 - Stored Cross-Site Scripting (XSS)
Slug
ilogic-accessibility
Published
2025-12-31
Title
Accessibility Press <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
iloveimg
Published
2023-11-13
Title
Image Compressor & Optimizer - iLoveIMG < 1.0.6 - Admin+ PHP Object Injection
Slug
image-alt-text
Published
2024-11-27
Title
Image Alt Text < 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Image Alt Text Update
Slug
image-captcha
Published
2025-03-24
Title
Image Captcha <= 1.2 - Cross-Site Request Forgery
Slug
image-caption-hover-pro
Published
2025-12-15
Title
Image Caption Hover Pro < 20.0 - Missing Authorization
Slug
image-carousel-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
image-carousel-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
image-carousel-shortcode
Published
2024-11-08
Title
Image Carousel Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-classify
Published
2024-11-08
Title
Image Classify <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
image-cleanup
Published
2025-06-27
Title
Image Cleanup <= 1.9.2 - Cross-Site Request Forgery
Slug
image-cleanup
Published
2025-12-04
Title
Image Cleanup <= 1.9.2 - Missing Authorization
Slug
image-cleanup
Published
2025-12-04
Title
Image Cleanup <= 1.9.2 - Unauthenticated Information Exposure
Slug
image-compare-block
Published
2025-09-22
Title
Beaf <= 1.6.2 - Authenticated (Admin+) Server-Side Request Forgery
Slug
image-comparison-elementor-addon
Published
2025-11-03
Title
Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload
Slug
image-content-show-hover
Published
2025-04-24
Title
Image Style Hover <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-editor-by-pixo
Published
2025-06-25
Title
Image Editor by Pixo < 2.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via download Parameter
Slug
image-editor-by-pixo
Published
2025-09-22
Title
Image Editor by Pixo <= 2.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-export
Published
2015-07-05
Title
Image Export <= 1.1.0 - Directory Traversal
Slug
image-gallery
Published
2024-10-11
Title
ImagePress – Image Gallery < 1.3.0 - Cross-Site Request Forgery to Plugin Settings Update
Slug
image-gallery
Published
2024-10-11
Title
ImagePress - Image Gallery < 1.3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Post Title Update
Slug
image-gallery
Published
2024-10-11
Title
ImagePress - Image Gallery < 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
Slug
image-gallery-box-by-crudlab
Published
2025-01-16
Title
Image Gallery Box by CRUDLab <= 1.0.3 - Authenticated (Subscriber+) Local File Inclusion
Slug
image-gallery-with-slideshow
Published
2014-08-01
Title
image-gallery-with-slideshow <= 1.5 - Arbitrary File Upload / SQL Injection