WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated SQL Injection
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Missing Authorization
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated Local File Inclusion
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.2 - Unauthenticated Arbitrary File Download
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated Arbitrary File Deletion
Slug
js-support-ticket
Published
2026-02-11
Title
JS Help Desk < 3.0.2 - Authenticated (Subscriber+) SQL Injection
Slug
js-twentytwenty
Published
2025-01-07
Title
jQuery TwentyTwenty <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
js-vehicle-manager
Published
2025-02-02
Title
WP Vehicle Manager <= 3.1 - Unauthenticated Local File Inclusion
Slug
js_composer
Published
2015-10-09
Title
WPBakery Page Builder < 4.7.4 - Multiple Unspecified Cross-Site Scripting (XSS)
Slug
js_composer
Published
2020-10-07
Title
WPBakery Page Builder < 6.4.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
js_composer
Published
2023-06-22
Title
WPBakery Page Builder < 6.13.0 - Contributor+ Stored XSS
Slug
js_composer
Published
2024-04-11
Title
WPBakery Visual Composer < 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title tag attribute
Slug
js_composer
Published
2024-04-11
Title
WPBakery Visual Composer < 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Heading tag attribute
Slug
js_composer
Published
2024-04-11
Title
WPBakery Visual Composer < 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button onclick attribute
Slug
js_composer
Published
2024-04-11
Title
WPBakery Visual Composer < 7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author
Slug
js_composer
Published
2024-06-12
Title
WPBakery Page Builder < 7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via VC Single Image link attribute
Slug
js_composer
Published
2024-08-05
Title
WPBakery < 7.8 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
js_composer
Published
2024-08-05
Title
WPBakery < 7.8 - Authenticated (Author+) Local File Inclusion
Slug
js_composer
Published
2025-06-18
Title
WPBakery Page Builder < 8.5 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builder
Slug
js_composer
Published
2025-07-23
Title
WPBakery Page Builder < 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements
Slug
js_composer
Published
2025-08-05
Title
WPBakery Page Builder for WordPress < 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
js_composer
Published
2025-10-14
Title
WPBakery Page Builder < 8.7 - Stored Cross-Site Scripting via vc_custom_heading Shortcode
Slug
js_composer
Published
2025-10-14
Title
WPBakery Page Builder < 8.7 - Stored Cross-Site Scripting via Custom JS Module
Slug
js_composer
Published
2025-10-17
Title
WPBakery Page Builder < 8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jsfiddle-shortcode
Published
2024-11-03
Title
JSFiddle Shortcode < 1.1.3 - Contributor+ XSS via Shortcode