WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jet-tricks
Published
2025-07-16
Title
JetTricks < 1.5.4.2 - Authenticated (Subscriber+) Information Exposure
Slug
jet-tricks
Published
2025-07-16
Title
JetTricks < 1.5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-tricks
Published
2026-09-23
Title
JetTricks < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-woo-builder
Published
2025-03-29
Title
JetWooBuilder < 2.1.18.1 - Authenticated (Contributor+) Local File Inclusion
Slug
jet-woo-builder
Published
2025-04-17
Title
JetWooBuilder < 2.1.18.1 - Missing Authorization
Slug
jet-woo-builder
Published
2025-07-16
Title
JetWooBuilder < 2.1.20.1 - Authenticated (Subscriber+) Information Exposure
Slug
jet-woo-builder
Published
2025-08-03
Title
JetWooBuilder < 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-woo-builder
Published
2025-07-16
Title
JetWooBuilder < 2.1.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-woo-product-gallery
Published
2025-03-29
Title
JetProductGallery < 2.1.22.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-woo-product-gallery
Published
2025-08-14
Title
JetProductGallery < 2.2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jetformbuilder
Published
2023-05-24
Title
JetFormBuilder < 3.0.7 - Cross-Site Request Forgery (CSRF)
Slug
jetformbuilder
Published
2023-11-28
Title
JetFormBuilder < 3.1.5 - Unauthenticated Content Injection
Slug
jetformbuilder
Published
2024-08-02
Title
JetFormBuilder < 3.3.4.2 - Authenticated (Administrator+) Privilege Escalation
Slug
jetformbuilder
Published
2025-07-16
Title
JetFormBuilder < 3.5.2 - Authenticated (Administrator+) PHP Object Injection
Slug
jetformbuilder
Published
2025-11-29
Title
JetFormBuilder < 3.5.4 - Missing Authorization
Slug
jetformbuilder
Published
2025-12-15
Title
JetFormBuilder < 3.5.4 - Missing Authorization to Unauthenticated Form Generation
Slug
jetformbuilder
Published
2026-03-20
Title
JetFormBuilder < 3.5.6.3 - Unauthenticated Arbitrary File Read via Media Field
Slug
jetformbuilder
Published
2026-03-23
Title
JetFormBuilder — Dynamic Blocks Form Builder < 3.5.6.2 - Authenticated (Contributor+) Remote Code Execution
Slug
jetformbuilder
Published
2026-06-16
Title
JetFormBuilder — Dynamic Blocks Form Builder < 3.6.1 - Unauthenticated Stored Cross-Site Scripting
Slug
jetformbuilder
Published
2026-06-16
Title
JetFormBuilder — Dynamic Blocks Form Builder < 3.6.1.1 - Subscriber+ Privilege Escalation
Slug
jetformbuilder
Published
2026-07-01
Title
JetFormBuilder < 3.6.3.1 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'context' Parameter
Slug
jetformbuilder
Published
2026-08-04
Title
JetFormBuilder — Dynamic Blocks Form Builder < 3.6.4.2 - Missing Authorization
Slug
jetformbuilder
Published
2026-09-03
Title
JetFormBuilder < 3.6.5.2 - Unauthenticated Stored XSS via WYSIWYG Field in Notification Emails
Slug
jetformbuilder
Published
2026-09-03
Title
JetFormBuilder < 3.6.5.2 - Unauthenticated Email Header Injection via Send Email Action
Slug
jetformbuilder
Published
2026-09-03
Title
JetFormBuilder < 3.6.5.2 - Unauthenticated Password Hash and Arbitrary Metadata Disclosure via Dynamic Preset