WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jet-tricks
Published
2025-07-16
Title
JetTricks < 1.5.4.2 - Authenticated (Subscriber+) Information Exposure
Slug
jet-tricks
Published
2025-07-16
Title
JetTricks < 1.5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-woo-builder
Published
2025-03-29
Title
JetWooBuilder < 2.1.18.1 - Authenticated (Contributor+) Local File Inclusion
Slug
jet-woo-builder
Published
2025-04-17
Title
JetWooBuilder < 2.1.18.1 - Missing Authorization
Slug
jet-woo-builder
Published
2025-07-16
Title
JetWooBuilder < 2.1.20.1 - Authenticated (Subscriber+) Information Exposure
Slug
jet-woo-builder
Published
2025-08-03
Title
JetWooBuilder < 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-woo-builder
Published
2025-07-16
Title
JetWooBuilder < 2.1.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-woo-product-gallery
Published
2025-03-29
Title
JetProductGallery < 2.1.22.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-woo-product-gallery
Published
2025-08-14
Title
JetProductGallery < 2.2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jetformbuilder
Published
2023-05-24
Title
JetFormBuilder < 3.0.7 - Cross-Site Request Forgery (CSRF)
Slug
jetformbuilder
Published
2023-11-28
Title
JetFormBuilder < 3.1.5 - Unauthenticated Content Injection
Slug
jetformbuilder
Published
2024-08-02
Title
JetFormBuilder < 3.3.4.2 - Authenticated (Administrator+) Privilege Escalation
Slug
jetformbuilder
Published
2025-07-16
Title
JetFormBuilder < 3.5.2 - Authenticated (Administrator+) PHP Object Injection
Slug
jetformbuilder
Published
2025-11-29
Title
JetFormBuilder < 3.5.4 - Missing Authorization
Slug
jetformbuilder
Published
2025-12-15
Title
JetFormBuilder < 3.5.4 - Missing Authorization to Unauthenticated Form Generation
Slug
jetformbuilder
Published
2026-03-20
Title
JetFormBuilder < 3.5.6.3 - Unauthenticated Arbitrary File Read via Media Field
Slug
jetgridbuilder
Published
2024-08-09
Title
JetGridBuilder < 1.1.3 - Authenticated (Contributor+) Local File Inclusion
Slug
jetpack
Published
2014-08-01
Title
Jetpack <= 2.9.2 - class.jetpack.php XML-RPC Access Control Bypass
Slug
jetpack
Published
2015-04-20
Title
Jetpack 3.0-3.4.2 - Cross-Site Scripting (XSS)
Slug
jetpack
Published
2015-05-06
Title
Jetpack <= 3.5.2 - Unauthenticated DOM Cross-Site Scripting (XSS)
Slug
jetpack
Published
2015-10-01
Title
Jetpack <= 3.7.0 - Stored Cross-Site Scripting (XSS)
Slug
jetpack
Published
2015-10-01
Title
Jetpack <= 3.7.0 - Information Disclosure
Slug
jetpack
Published
2016-02-25
Title
Jetpack <= 3.9.1 - LaTeX HTML Element XSS
Slug
jetpack
Published
2016-05-26
Title
Jetpack 2.0-4.0.2 - Shortcode Stored Cross-Site Scripting (XSS)
Slug
jetpack
Published
2016-06-20
Title
Jetpack <= 4.0.3 - Multiple Vulnerabilities