WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jetwidgets-for-elementor
Published
2023-01-04
Title
JetWidgets for Elementor < 1.0.13 - Settings Update via CSRF
Slug
jetwidgets-for-elementor
Published
2022-12-21
Title
JetWidgets For Elementor < 1.0.14 - Contributor+ Stored XSS via Shortcode
Slug
jetwidgets-for-elementor
Published
2024-03-13
Title
JetWidgets For Elementor < 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget
Slug
jetwidgets-for-elementor
Published
2024-03-20
Title
JetWidgets For Elementor < 1.0.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL
Slug
jetwidgets-for-elementor
Published
2024-06-19
Title
JetWidgets For Elementor < 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters
Slug
jetwidgets-for-elementor
Published
2024-11-11
Title
JetWidgets For Elementor < 1.0.19 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
jetwidgets-for-elementor
Published
2025-12-12
Title
JetWidgets For Elementor < 1.0.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets
Slug
jetwoo-widgets-for-elementor
Published
2024-07-19
Title
JetWidgets for Elementor and WooCommerce < 1.1.8 - Authenticated (Contributor+) Limited Local File Inclusion
Slug
jf3-maintenance-mode
Published
2024-09-16
Title
Maintenance Redirect < 2.1.0 - IP Spoofing to Maintenance Mode Bypass
Slug
jh-404-logger
Published
2021-03-11
Title
JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
jiangqie-free-mini-program
Published
2024-10-15
Title
JiangQie Free Mini Program <= 2.5.2 - Unauthenticated Arbitrary File Uplaod
Slug
jiangqie-official-website-mini-program
Published
2021-07-30
Title
JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection
Slug
jiangqie-official-website-mini-program
Published
2025-03-24
Title
JiangQie Official Website Mini Program <= 1.8.2 - Authenticated (Administrator+) SQL Injection
Slug
jibu-pro
Published
2018-08-30
Title
Jibu Pro <= 1.7 - Stored XSS
Slug
jigoshop
Published
2014-08-01
Title
Jigoshop 1.8 - Multiple Script Direct Request Path Disclosure
Slug
jigoshop-exporter
Published
2024-10-30
Title
Jigoshop – Store Exporter <= 1.5.8 - Reflected Cross-Site Scripting
Slug
jigoshop-store-toolkit
Published
2024-11-04
Title
Jigoshop – Store Toolkit <= 1.4.0 - Reflected Cross-Site Scripting
Slug
jinshuju
Published
2025-09-05
Title
金数据 <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jivochat
Published
2022-05-09
Title
JivoChat < 1.3.5.4 - Stored Cross-Site Scripting via CSRF
Slug
jk-html-to-pdf
Published
2025-01-07
Title
JK Html To Pdf <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
jkdevkit
Published
2025-07-02
Title
JKDEVKIT <= 1.9.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
jlayer-parallax-slider-wp
Published
2024-10-18
Title
jLayer Parallax Slider <= 1.0 - Reflected Cross-Site Scripting
Slug
jm-twitter-cards
Published
2015-10-12
Title
JM Twitter Cards <= 6.1 - Full Path Disclosure (FPD)
Slug
jm-twitter-cards
Published
2024-03-04
Title
JM Twitter Cards < 14.1.0 - Password Protected Post Access
Slug
jma-youtube-playlists-with-schema
Published
2025-02-18
Title
YouTube Playlists with Schema <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting