WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jet-engine
Published
2026-07-20
Title
JetEngine < 3.8.12 - Contributor+ Stored XSS via jet_engine Shortcode
Slug
jet-engine
Published
2026-08-03
Title
JetEngine < 3.8.13.2 - Unauthenticated Stored Cross-Site Scripting
Slug
jet-engine
Published
2026-08-19
Title
JetEngine < 3.8.14.2 - Unauthenticated Stored Cross-Site Scripting
Slug
jet-engine
Published
2026-08-19
Title
JetEngine < 3.8.14.1 - Unauthenticated Remote Code Execution
Slug
jet-engine
Published
2026-08-05
Title
JetEngine < 3.8.13.1 - Unauthenticated Stored XSS via Form File Upload (SVG)
Slug
jet-engine
Published
2026-08-27
Title
JetEngine < 3.8.14.3 - Unauthenticated Stored Cross-Site Scripting
Slug
jet-engine
Published
2026-08-17
Title
JetEngine < 3.8.14 - Author+ Stored XSS via SVG Upload
Slug
jet-footer-code
Published
2024-12-12
Title
Jet Footer Code <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
jet-menu
Published
2025-04-15
Title
JetMenu < 2.4.9.1 - Missing Authorization
Slug
jet-menu
Published
2025-07-16
Title
JetMenu < 2.4.11.2 - Authenticated (Subscriber+) Information Exposure
Slug
jet-popup
Published
2025-04-15
Title
JetPopup < 2.0.12 - Missing Authorization
Slug
jet-popup
Published
2025-07-16
Title
JetPopup < 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-popup
Published
2025-07-16
Title
JetPopup < 2.0.15.1 - Authenticated (Subscriber+) Information Disclosure
Slug
jet-popup
Published
2025-07-16
Title
JetPopup < 2.0.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-popup
Published
2025-12-30
Title
JetPopup < 2.0.20.2 - Authenticated (Contributor+) Insecure Direct Object Reference
Slug
jet-popup
Published
2026-09-04
Title
JetPopup < 2.0.20.3 - Missing Authorization
Slug
jet-reviews
Published
2025-04-18
Title
JetReviews < 2.3.7 - Authenticated (Contributor+) Local File Inclusion
Slug
jet-reviews
Published
2025-08-05
Title
JetReviews < 3.0.0.1 - Authenticated (Contributor+) Local File Inclusion
Slug
jet-reviews
Published
2026-07-01
Title
JetReviews < 3.0.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
jet-reviews
Published
2026-08-01
Title
JetReviews < 3.1.0 - Unauthenticated Information Exposure
Slug
jet-search
Published
2024-08-15
Title
JetSearch < 3.5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-search
Published
2025-03-29
Title
JetSearch < 3.5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-search
Published
2025-07-16
Title
JetSearch < 3.5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-search
Published
2025-07-17
Title
JetSearch < 3.5.10.1 - Unauthenticated SQL Injection
Slug
jet-search
Published
2025-07-18
Title
JetSearch < 3.5.10.1 - Reflected Cross-Site Scripting