WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
iks-menu
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
iksweb
Published
2023-02-21
Title
Старт < 3.8 - Admin+ Stored XSS
Slug
ilab-media-tools
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ilab-media-tools
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ilab-media-tools
Published
2024-03-25
Title
Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more < 4.5.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ilc-thickbox
Published
2024-08-22
Title
ILC Thickbox <= 1.0 - Settings update via CSRF
Slug
ilive
Published
2019-06-25
Title
iLive <= 1.0.4 - Stored Cross-Site Scripting (XSS)
Slug
ilogic-accessibility
Published
2025-12-31
Title
Accessibility Press <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
iloveimg
Published
2023-11-13
Title
Image Compressor & Optimizer - iLoveIMG < 1.0.6 - Admin+ PHP Object Injection
Slug
image-alt-text
Published
2024-11-27
Title
Image Alt Text < 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Image Alt Text Update
Slug
image-buzz
Published
2026-09-21
Title
Image Buzz <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary API Key Modification via 'pixabay_api' Parameter
Slug
image-captcha
Published
2025-03-24
Title
Image Captcha <= 1.2 - Cross-Site Request Forgery
Slug
image-caption-hover-pro
Published
2025-12-15
Title
Image Caption Hover Pro < 20.0 - Missing Authorization
Slug
image-carousel
Published
2026-06-26
Title
Image Carousel <= 1.0.0.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-carousel-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
image-carousel-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
image-carousel-shortcode
Published
2024-11-08
Title
Image Carousel Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-classify
Published
2024-11-08
Title
Image Classify <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
image-cleanup
Published
2025-06-27
Title
Image Cleanup <= 1.9.2 - Cross-Site Request Forgery
Slug
image-cleanup
Published
2025-12-04
Title
Image Cleanup <= 1.9.2 - Missing Authorization
Slug
image-cleanup
Published
2025-12-04
Title
Image Cleanup <= 1.9.2 - Unauthenticated Information Exposure
Slug
image-compare-block
Published
2025-09-22
Title
Beaf <= 1.6.2 - Authenticated (Admin+) Server-Side Request Forgery
Slug
image-comparison-elementor-addon
Published
2025-11-03
Title
Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload
Slug
image-content-show-hover
Published
2025-04-24
Title
Image Style Hover <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-editor-by-pixo
Published
2025-06-25
Title
Image Editor by Pixo < 2.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via download Parameter