WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
js-multihotel
Published
2014-08-01
Title
JS MultiHotel 2.2.1 - Multiple Script Direct Request Path Disclosure
Slug
js-multihotel
Published
2014-08-01
Title
JS MultiHotel 2.2.1 - includes/timthumb.php src Parameter Direct Request Path Disclosure
Slug
js-multihotel
Published
2014-08-01
Title
JS MultiHotel 2.2.1 - refreshDate.php roomid Parameter Reflected XSS
Slug
js-restaurant
Published
2014-08-01
Title
JS Restaurant - popup.php restuarant_id Parameter SQL Injection
Slug
js-support-ticket
Published
2018-06-25
Title
JS Support Ticket < 2.0.6 - CSRF
Slug
js-support-ticket
Published
2023-01-27
Title
JS Help Desk < 2.7.2 - CSRF
Slug
js-support-ticket
Published
2023-06-23
Title
JS Help Desk - Best Help Desk & Support < 2.7.8 - Subscriber+ Ticket Manipulation via IDOR
Slug
js-support-ticket
Published
2023-12-21
Title
JS Help Desk < 2.8.2 - Unauthenticated SQL Injection via email and trackingid
Slug
js-support-ticket
Published
2024-04-05
Title
JS Help Desk – Best Help Desk & Support Plugin < 2.8.4 - Missing Authorization
Slug
js-support-ticket
Published
2024-08-12
Title
JS Help Desk – The Ultimate Help Desk & Support Plugin < 2.8.7 - Unauthenticated PHP Code Injection to Remote Code Execution
Slug
js-support-ticket
Published
2024-11-01
Title
JS Help Desk – Best Help Desk & Support Plugin < 2.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
js-support-ticket
Published
2025-02-03
Title
JS Help Desk – The Ultimate Help Desk & Support Plugin < 2.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
js-support-ticket
Published
2025-02-12
Title
JS Help Desk – The Ultimate Help Desk & Support Plugin < 2.8.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated SQL Injection
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Missing Authorization
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated Local File Inclusion
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.2 - Unauthenticated Arbitrary File Download
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated Arbitrary File Deletion
Slug
js-twentytwenty
Published
2025-01-07
Title
jQuery TwentyTwenty <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
js-vehicle-manager
Published
2025-02-02
Title
WP Vehicle Manager <= 3.1 - Unauthenticated Local File Inclusion
Slug
js_composer
Published
2015-10-09
Title
WPBakery Page Builder < 4.7.4 - Multiple Unspecified Cross-Site Scripting (XSS)
Slug
js_composer
Published
2020-10-07
Title
WPBakery Page Builder < 6.4.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
js_composer
Published
2023-06-22
Title
WPBakery Page Builder < 6.13.0 - Contributor+ Stored XSS
Slug
js_composer
Published
2024-04-11
Title
WPBakery Visual Composer < 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute
Slug
js_composer
Published
2024-04-11
Title
WPBakery Visual Composer < 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attribute