WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kunze-law
Published
2026-01-13
Title
Kunze Law <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
kush-micro-news
Published
2025-02-21
Title
Kush Micro News <= 1.6.7 - Unauthenticated Stored Cross-Site Scripting
Slug
kv-send-email-from-admin
Published
2025-01-16
Title
Kv Compose Email From Dashboard <= 1.1 - Reflected Cross-Site Scripting
Slug
kv-tinymce-editor-fonts
Published
2023-09-28
Title
Kv TinyMCE Editor Add Fonts <= 1.1 - Font List Update via CSRF
Slug
kvcore-idx
Published
2024-12-11
Title
kvCORE IDX <= 2.3.35 - Reflected Cross-Site Scripting
Slug
kvoucher
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
kvoucher
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
kwayy-html-sitemap
Published
2022-12-05
Title
Kwayy HTML Sitemap < 4.0 - Admin+ Stored XSS