WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jabberbenachrichtigung
Published
2025-12-04
Title
Jabbernotification <= 0.99-RC2 - Reflected Cross-Site Scripting via admin.php PATH_INFO
Slug
jalbum-bridge
Published
2024-12-02
Title
jAlbum Bridge < 2.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter
Slug
jalbum-bridge
Published
2025-03-27
Title
jAlbum Bridge < 2.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jalbum-bridge
Published
2025-03-26
Title
jAlbum Bridge < 2.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jammer
Published
2014-08-01
Title
jammer <= 0.2 - jPlayer.swf XSS
Slug
jannah-extensions
Published
2025-10-30
Title
Jannah - Extensions < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jaspreetchahals-coupons-lite
Published
2014-08-01
Title
jaspreetchahals-coupons-lite <= 2.1 - XSS in ZeroClipboard
Slug
java-trackback
Published
2014-08-01
Title
java-trackback <= 0.2 - XSS in ZeroClipboard
Slug
javascript-logic
Published
2024-07-11
Title
JavaScript Logic <= 0.1 - CSRF to Stored XSS
Slug
javo-core
Published
2025-03-07
Title
Javo Core < 3.0.0.266 - Unauthenticated Privilege Escalation in ajax_signup
Slug
javo-core
Published
2025-09-22
Title
Javo Core <= 3.0.0.266 - Missing Authorization
Slug
javo-core
Published
2025-09-26
Title
Javo Core <= 3.0.0.266 - Cross-Site Request Forgery
Slug
javo-core
Published
2025-08-26
Title
Javo Core <= 3.0.0.529 - Unauthenticated Arbitrary Content Deletion
Slug
javo-core
Published
2025-08-03
Title
Javo Core <= 3.0.0.266 - Unauthenticated Remote Code Execution
Slug
jay-login-register
Published
2025-12-12
Title
JAY Login & Register < 2.5.01 - Authentication Bypass via Cookie
Slug
jayj-quicktag
Published
2017-08-28
Title
Jayj Quicktag < 1.3.2 - CSRF
Slug
jazz-popups
Published
2023-05-18
Title
Jazz Popups <= 1.8.7 - Unauthenticated Reflected Cross-Site Scripting
Slug
jazzcash-woocommerce-gateway
Published
2023-03-22
Title
WooCommerce JazzCash Gateway <= 2.0 - Reflected Cross-Site Scripting
Slug
jb-horizontal-scroller-news-ticker
Published
2025-01-16
Title
JB Horizontal Scroller News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jb-news-ticker
Published
2025-10-21
Title
JB News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jc-ajax-search-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
jc-importer
Published
2022-04-11
Title
Import WP < 2.4.6 - Admin+ Arbitrary File Upload to RCE
Slug
jc-importer
Published
2024-04-03
Title
Import WP < 2.13.1 - Admin+ Server-side Request Forgery
Slug
jc-importer
Published
2025-01-24
Title
Import WP – Export and Import CSV and XML files to WordPress < 2.14.6 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
jc-importer
Published
2025-10-31
Title
Import WP – Export and Import CSV and XML files to WordPress < 2.14.17 - Authenticated (Admin+) Arbitrary File Read