WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kk-star-ratings
Published
2023-10-25
Title
kk Star Ratings < 5.4.6 - Missing Authorization
Slug
kk-star-ratings
Published
2024-12-20
Title
kk Star Ratings – Rate Post & Collect User Feedbacks < 5.4.10.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
kk-star-ratings
Published
2026-08-21
Title
kk Star Ratings < 5.4.10.4 - Unauthenticated Arbitrary Shortcode Execution via 'payload' Parameter
Slug
kk-youtube-video
Published
2025-06-13
Title
kk Youtube Video <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kkprogressbar
Published
2024-05-06
Title
KKProgressbar2 Free <= 1.1.4.2 - Progress Bar Deletion via CSRF
Slug
kkprogressbar
Published
2024-05-06
Title
KKProgressbar2 Free <= 1.1.4.2 - Stored XSS via CSRF
Slug
kkprogressbar
Published
2024-05-06
Title
KKProgressbar2 Free <= 1.1.4.2 - Admin+ SQL Injection
Slug
klamra-paycal-for-aspaclaria
Published
2026-06-05
Title
Klamra Paycal for Aspaclaria < 1.1.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'invoice_id' Parameter
Slug
klarna-checkout-for-woocommerce
Published
2020-04-08
Title
Klarna Checkout for WooCommerce < 2.0.10 - Authenticated Arbitrary Plugin Deactivation, Activation and Installation
Slug
klarna-checkout-for-woocommerce
Published
2025-03-27
Title
Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
Slug
klarna-order-management-for-woocommerce
Published
2025-09-03
Title
Klarna Order Management for WooCommerce < 1.9.9 - Shop Manager+ Information Disclosure
Slug
klarna-payments-for-woocommerce
Published
2024-03-28
Title
Klarna Payments for WooCommerce < 3.3.0 - Missing Authorization
Slug
klarna-payments-for-woocommerce
Published
2026-10-15
Title
Klarna for WooCommerce < 4.13.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order-pay' Endpoint
Slug
klaviyo
Published
2023-03-20
Title
Klaviyo <= 3.0.10 - Admin+ Stored XSS
Slug
klaviyo
Published
2023-03-13
Title
Klaviyo < 3.0.8 - Admin+ Stored XSS
Slug
kliken-ads-pixel-for-meta
Published
2026-10-19
Title
Kliken: Ads + Pixel for Meta < 1.2.3 - Unauthenticated Order Data Disclosure via IDOR
Slug
klubraum-membership-request
Published
2026-07-28
Title
Klubraum Membership Request < 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Update
Slug
kn-fix-your
Published
2021-07-20
Title
KN Fix Your Title <= 1.0.1 - Authenticated Stored XSS
Slug
knews
Published
2014-08-01
Title
Knews 1.2.5 - Multilingual Newsletters Cross-Site Request Forgery
Slug
knews
Published
2014-08-01
Title
Knews 1.2.5 - Unspecified XSS
Slug
knews
Published
2014-08-01
Title
Knews 1.1.0 - wysiwyg/fontpicker/index.php ff Parameter XSS
Slug
knight-lab-timelinejs
Published
2020-07-09
Title
Knight Lab Timeline < 3.7.0.0 - Outdated TimelineJS library could Lead to Stored XSS
Slug
knight-lab-timelinejs
Published
2024-03-15
Title
Knight Lab Timeline < 3.9.3.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
knight-lab-timelinejs
Published
2024-04-16
Title
Knight Lab Timeline <= 3.9.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
knit-pay
Published
2026-06-08
Title
Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more < 9.4.0.1 - Missing Authorization