WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jetformbuilder
Published
2023-11-28
Title
JetFormBuilder < 3.1.5 - Unauthenticated Content Injection
Slug
jetformbuilder
Published
2024-08-02
Title
JetFormBuilder < 3.3.4.2 - Authenticated (Administrator+) Privilege Escalation
Slug
jetformbuilder
Published
2025-07-16
Title
JetFormBuilder < 3.5.2 - Authenticated (Administrator+) PHP Object Injection
Slug
jetformbuilder
Published
2025-11-29
Title
JetFormBuilder < 3.5.4 - Missing Authorization
Slug
jetformbuilder
Published
2025-12-15
Title
JetFormBuilder < 3.5.4 - Missing Authorization to Unauthenticated Form Generation
Slug
jetgridbuilder
Published
2024-08-09
Title
JetGridBuilder < 1.1.3 - Authenticated (Contributor+) Local File Inclusion
Slug
jetpack
Published
2014-08-01
Title
Jetpack <= 2.9.2 - class.jetpack.php XML-RPC Access Control Bypass
Slug
jetpack
Published
2015-04-20
Title
Jetpack 3.0-3.4.2 - Cross-Site Scripting (XSS)
Slug
jetpack
Published
2015-05-06
Title
Jetpack <= 3.5.2 - Unauthenticated DOM Cross-Site Scripting (XSS)
Slug
jetpack
Published
2015-10-01
Title
Jetpack <= 3.7.0 - Stored Cross-Site Scripting (XSS)
Slug
jetpack
Published
2015-10-01
Title
Jetpack <= 3.7.0 - Information Disclosure
Slug
jetpack
Published
2016-02-25
Title
Jetpack <= 3.9.1 - LaTeX HTML Element XSS
Slug
jetpack
Published
2016-05-26
Title
Jetpack 2.0-4.0.2 - Shortcode Stored Cross-Site Scripting (XSS)
Slug
jetpack
Published
2016-06-20
Title
Jetpack <= 4.0.3 - Multiple Vulnerabilities
Slug
jetpack
Published
2018-12-11
Title
Jetpack < 6.5 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
jetpack
Published
2019-11-19
Title
Jetpack 5.1-7.9 - Vulnerability in Shortcode Embed Code
Slug
jetpack
Published
2021-06-03
Title
Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak
Slug
jetpack
Published
2023-05-30
Title
Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API
Slug
jetpack
Published
2023-11-16
Title
Jetpack < 12.8-a.3 - Contributor+ Stored XSS via block attribute
Slug
jetpack
Published
2023-11-16
Title
Jetpack < 12.7 - Improper Authorization via WPCom External Media REST endpoints
Slug
jetpack
Published
2023-11-16
Title
Jetpack < 12.7 - Authenticated(Contributor+) Clickjacking via Iframe Injection
Slug
jetpack
Published
2024-03-25
Title
Jetpack < 13.2.1 - Contributor+ Stored XSS
Slug
jetpack
Published
2024-05-13
Title
Jetpack < 13.4 - Contributor+ Stored Cross-Site Scripting via wpvideo Shortcode
Slug
jetpack
Published
2024-10-14
Title
Jetpack < 13.9.1 - Subscriber+ Arbitrary Feedback Access
Slug
jetpack
Published
2024-10-14
Title
Jetpack < 13.9.1 - Subscriber+ Arbitrary Feedback Access