WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
joomsport-sports-league-results-management
Published
2019-08-07
Title
JoomSport <= 3.3 - SQL Injection
Slug
joomsport-sports-league-results-management
Published
2021-06-08
Title
JoomSport < 5.1.8 - Unauthenticated PHP Object Injection
Slug
joomsport-sports-league-results-management
Published
2022-08-08
Title
JoomSport < 5.2.6 - Admin+ SQLi
Slug
joomsport-sports-league-results-management
Published
2022-11-28
Title
JoomSport < 5.2.8 - Unauthenticated SQLi
Slug
joomsport-sports-league-results-management
Published
2024-08-16
Title
JoomSport < 5.5.7 - Missing Authorization
Slug
joomsport-sports-league-results-management
Published
2024-09-24
Title
JoomSport < 5.6.4 - Missing Authorization
Slug
joomsport-sports-league-results-management
Published
2025-01-06
Title
JoomSport < 5.6.18 - Reflected Cross-Site Scripting via page
Slug
joomsport-sports-league-results-management
Published
2025-10-02
Title
JoomSport < 5.7.4 - Unauthenticated Directory Traversal to Local File Inclusion
Slug
journey-analytics
Published
2021-06-30
Title
Journey Analytics < 1.0.13 - Unauthorised AJAX call via CSRF
Slug
joy-of-text
Published
2022-12-08
Title
Joy Of Text Lite < 2.3.1 - Unauthenticated SQLi
Slug
joy-of-text
Published
2024-07-11
Title
Joy Of Text Lite – SMS messaging for WordPress <= 2.3.1 - Settings Update via CSRF
Slug
joy-of-text
Published
2024-09-26
Title
Joy Of Text Lite <= 2.3.1 - Missing Authorization
Slug
jp-staticpagex
Published
2022-05-23
Title
Static Page eXtended <= 2.1 - Arbitrary Settings Update via CSRF to Stored XSS
Slug
jp-students-result-system-premium
Published
2025-05-21
Title
JP Students Result Management System Premium 1.1.7 - Unauthenticated Arbitrary File Upload
Slug
jquery-accordion-slideshow
Published
2023-10-30
Title
Jquery accordion slideshow < 8.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
jquery-archive-list-widget
Published
2025-08-18
Title
JS Archive List < 6.1.6 - Unauthenticated SQL Injection via build_sql_where Function
Slug
jquery-archive-list-widget
Published
2025-08-27
Title
JS Archive List < 6.1.6 - Unauthenticated SQL Injection
Slug
jquery-collapse-o-matic
Published
2022-12-28
Title
Collapse-O-Matic < 1.8.3 - Contributor+ Stored XSS
Slug
jquery-collapse-o-matic
Published
2023-08-22
Title
Collapse-O-Matic <= 1.8.5.8 - Contributor+ Stored XSS
Slug
jquery-collapse-o-matic
Published
2024-04-23
Title
Collapse-O-Matic < 1.8.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
jquery-collapse-o-matic
Published
2024-06-14
Title
Collapse-O-Matic <= 1.8.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
jquery-colorbox
Published
2025-08-22
Title
jQuery Colorbox <= 4.6.3 - Contributor+ Stored XSS
Slug
jquery-drop-down-menu-plugin
Published
2025-03-24
Title
jQuery Dropdown Menu <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
jquery-mega-menu
Published
2014-08-01
Title
jQuery Mega Menu 1.0 - Local File Inclusion
Slug
jquery-news-ticker
Published
2023-10-30
Title
Jquery news ticker < 3.1 - Authenticated (Subscriber+) SQL Injection via Shortcode