WordPress Plugin Vulnerabilities | Page 10 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2026-09-03

Title

JetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' Parameter

Slug

Published

2026-09-07

Title

JetFormBuilder — Dynamic Blocks Form Builder < 3.6.5.2 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-09-15

Title

JetFormBuilder < 3.6.2.1 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter

Slug

Published

2026-09-17

Title

JetFormBuilder 3.5.6.2 - 3.6.5.2 - Admin+ Arbitrary File Deletion via Server-Side Validation Callback

Slug

Published

2026-09-24

Title

JetFormBuilder < 3.6.5.4 - Reflected Cross-Site Scripting via 'jfb_xss' (URL Query Variable) Parameter via Calculated Field

Slug

Published

2026-10-01

Title

JetFormBuilder < 3.6.6 - Unauthenticated Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Action

Slug

Published

2026-09-30

Title

JetFormBuilder — Dynamic Blocks Form Builder < 3.6.6 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-10-09

Title

JetFormBuilder < 3.6.6.1 - Reflected DOM-Based Cross-Site Scripting via 'query_var' Dynamic Preset via data-jfb-macro / JFB_FIELD:: Macro Renderer

Slug

Published

2026-10-12

Title

JetFormBuilder — Dynamic Blocks Form Builder < 3.6.6.1 - Missing Authorization

Slug

Published

2026-09-03

Title

JetFormBuilder < 3.6.2.1 - Missing Authorization to Unauthenticated JetEngine Options Page Modification

Slug

Published

2026-10-30

Title

JetFormBuilder — Dynamic Blocks Form Builder < 3.6.8 - Missing Authorization

Slug

Published

2026-10-30

Title

JetFormBuilder — Dynamic Blocks Form Builder < 3.6.8 - Authenticated (Subscriber+) Arbitrary Media Attachment Deletion

Slug

Published

2026-10-30

Title

JetFormBuilder — Dynamic Blocks Form Builder < 3.6.8 - Unauthenticated Arbitrary Shortcode Execution

Slug

Published

2024-08-09

Title

JetGridBuilder < 1.1.3 - Authenticated (Contributor+) Local File Inclusion

Slug

Published

2014-08-01

Title

Jetpack <= 2.9.2 - class.jetpack.php XML-RPC Access Control Bypass

Slug

Published

2015-04-20

Title

Jetpack 3.0-3.4.2 - Cross-Site Scripting (XSS)

Slug

Published

2015-05-06

Title

Jetpack <= 3.5.2 - Unauthenticated DOM Cross-Site Scripting (XSS)

Slug

Published

2015-10-01

Title

Jetpack <= 3.7.0 - Stored Cross-Site Scripting (XSS)

Slug

Published

2015-10-01

Title

Jetpack <= 3.7.0 - Information Disclosure

Slug

Published

2016-02-25

Title

Jetpack <= 3.9.1 - LaTeX HTML Element XSS

Slug

Published

2016-05-26

Title

Jetpack 2.0-4.0.2 - Shortcode Stored Cross-Site Scripting (XSS)

Slug

Published

2016-06-20

Title

Jetpack <= 4.0.3 - Multiple Vulnerabilities

Slug

Published

2018-12-11

Title

Jetpack < 6.5 - Authenticated Stored Cross-Site Scripting (XSS)

Slug

Published

2019-11-19

Title

Jetpack 5.1-7.9 - Vulnerability in Shortcode Embed Code

Slug

Published

2021-06-03

Title

Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak