WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jetpack
Published
2024-09-04
Title
Jetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS
Slug
jetpack
Published
2024-12-04
Title
Jetpack 13.0-14.0 - Unauthenticated DOM-XSS
Slug
jetpack-boost
Published
2024-07-08
Title
Jetpack Boost < 3.4.7 - Admin+ SSRF
Slug
jetpack-boost
Published
2024-09-04
Title
Jetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS
Slug
jetpack-debug-helper
Published
2025-05-15
Title
Jetpack Debug Tools < 2.0.1 - Missing Authorization
Slug
jetpack-feedback-exporter
Published
2025-04-04
Title
Jetpack Feedback Exporter <= 1.23 - Unauthenticated Sensitive Information Exposure
Slug
jetpackcrm-ext-woo-connect
Published
2021-09-14
Title
Jetpack CRM WooCommerce Connect < 2.13 - Unauthorized Invoice Disclosure
Slug
jetwidgets-for-elementor
Published
2021-04-13
Title
JetWidgets For Elementor < 1.0.9 - Contributor+ Stored XSS
Slug
jetwidgets-for-elementor
Published
2023-01-04
Title
JetWidgets for Elementor < 1.0.13 - Settings Update via CSRF
Slug
jetwidgets-for-elementor
Published
2022-12-21
Title
JetWidgets For Elementor < 1.0.14 - Contributor+ Stored XSS via Shortcode
Slug
jetwidgets-for-elementor
Published
2024-03-13
Title
JetWidgets For Elementor < 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget
Slug
jetwidgets-for-elementor
Published
2024-03-20
Title
JetWidgets For Elementor < 1.0.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL
Slug
jetwidgets-for-elementor
Published
2024-06-19
Title
JetWidgets For Elementor < 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters
Slug
jetwidgets-for-elementor
Published
2024-11-11
Title
JetWidgets For Elementor < 1.0.19 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
jetwidgets-for-elementor
Published
2025-12-12
Title
JetWidgets For Elementor < 1.0.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets
Slug
jetwoo-widgets-for-elementor
Published
2024-07-19
Title
JetWidgets for Elementor and WooCommerce < 1.1.8 - Authenticated (Contributor+) Limited Local File Inclusion
Slug
jf3-maintenance-mode
Published
2024-09-16
Title
Maintenance Redirect < 2.1.0 - IP Spoofing to Maintenance Mode Bypass
Slug
jh-404-logger
Published
2021-03-11
Title
JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
jiangqie-free-mini-program
Published
2024-10-15
Title
JiangQie Free Mini Program <= 2.5.2 - Unauthenticated Arbitrary File Uplaod
Slug
jiangqie-official-website-mini-program
Published
2021-07-30
Title
JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection
Slug
jiangqie-official-website-mini-program
Published
2025-03-24
Title
JiangQie Official Website Mini Program <= 1.8.2 - Authenticated (Administrator+) SQL Injection
Slug
jibu-pro
Published
2018-08-30
Title
Jibu Pro <= 1.7 - Stored XSS
Slug
jigoshop
Published
2014-08-01
Title
Jigoshop 1.8 - Multiple Script Direct Request Path Disclosure
Slug
jigoshop-exporter
Published
2024-10-30
Title
Jigoshop – Store Exporter <= 1.5.8 - Reflected Cross-Site Scripting
Slug
jigoshop-store-toolkit
Published
2024-11-04
Title
Jigoshop – Store Toolkit <= 1.4.0 - Reflected Cross-Site Scripting