WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
image-hover-effects-ultimate
Published
2022-12-13
Title
Image Hover Effects Ultimate 9.8.1-9.8.4 - Admin+ Stored XSS
Slug
image-hover-effects-ultimate
Published
2025-11-19
Title
Multiple Plugins and Themes - Contributor+ DOM-Based Stored XSS via lightGallery Library
Slug
image-hover-effects-ultimate-visual-composer
Published
2022-07-25
Title
Flipbox < 2.6.1 - Authenticated Arbitrary Options Update
Slug
image-hover-effects-visual-composer-extension
Published
2023-01-20
Title
Image Hover Effects For WPBakery Page Builder < 5.0 - Contributor+ Stored XSS
Slug
image-hover-effects-with-carousel
Published
2023-02-02
Title
Image Hover Effects for Elementor with Lightbox and Flipbox < 3.0 - Reflected XSS
Slug
image-hover-effects-with-carousel
Published
2024-06-05
Title
Image Hover Effects for Elementor with Lightbox and Flipbox <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters
Slug
image-intense
Published
2018-09-05
Title
Image Intense <= 3.2.5 - Authenticated SQL Injection in shortcodes
Slug
image-magnify
Published
2025-01-06
Title
Image Magnify <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-map-pro
Published
2022-11-23
Title
Image Map Pro < 5.6.9 - Cross-Site Request Forgery
Slug
image-map-pro
Published
2022-11-23
Title
Image Map Pro < 5.6.9 - Cross-Site Scripting
Slug
image-map-pro
Published
2024-10-24
Title
Image Map Pro < 6.0.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
image-map-pro
Published
2024-10-24
Title
Image Map Pro < 6.0.21 - Missing Authorization to Authenticated (Contributor+) Map Project Add/Update/Delete
Slug
image-map-pro-lite
Published
2023-06-26
Title
Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite < 1.0.0 - Subscriber+ Stored XSS
Slug
image-map-pro-lite
Published
2023-06-26
Title
Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite < 1.0.0 - CSRF to Stored XSS
Slug
image-mapper
Published
2024-12-16
Title
Image Mapper <= 0.2.5.3 - Reflected Cross-Site Scripting
Slug
image-metadata-cruncher
Published
2015-02-22
Title
Image Metadata Cruncher - Multiple Cross-Site Scripting (XSS)
Slug
image-optimization
Published
2026-02-20
Title
Image Optimizer by Elementor < 1.7.2 - Missing Authorization
Slug
image-optimizer-wd
Published
2023-04-26
Title
Image Optimizer by 10web < 1.0.27 - Reflected Cross-Site Scripting
Slug
image-optimizer-wd
Published
2023-05-02
Title
Image Optimizer by 10web < 1.0.27 - Admin+ Path Traversal
Slug
image-optimizer-wpssk
Published
2025-12-04
Title
Image Optimizer by wps.sk <= 1.2.0 - Cross-Site Request Forgery to Bulk Image Optimization
Slug
image-over-image-vc-extension
Published
2023-03-08
Title
Image Over Image For WPBakery Page Builder < 3.0 - Contributor+ Stored XSS
Slug
image-protector
Published
2023-06-19
Title
Image Protector <= 1.1 - Admin+ Stored Cross-Site Scripting
Slug
image-regenerate-select-crop
Published
2023-10-09
Title
Image Regenerate & Select Crop < 7.3.1 - Sensitive Information Exposure
Slug
image-resizer-on-the-fly
Published
2025-06-13
Title
Image Resizer On The Fly <= 1.1 - Unauthenticated Arbitrary File Deletion
Slug
image-shadow
Published
2025-06-23
Title
Image Shadow <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Deletion