WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kanpress
Published
2025-08-20
Title
Kanpress <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kanzu-support-desk
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
kanzu-support-desk
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
kanzu-support-desk
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
kapost-byline
Published
2025-01-16
Title
Kapost < 2.3.0 - Stored XSS via CSRF
Slug
kargo-entegrator
Published
2025-04-11
Title
Kargo Entegratör < 1.1.15 - Authenticated (Shop Manager+) SQL Injection
Slug
kargo-takip
Published
2026-06-23
Title
Kargo Takip <= 1.2 - Unauthenticated Server-Side Request Forgery via 'api_url' Parameter
Slug
kargo-takip-turkiye
Published
2026-03-20
Title
Kargo Takip < 0.2.4 - Missing Authorization
Slug
kaswara
Published
2021-04-20
Title
Kaswara Modern VC Addons (0-day) - Unauthenticated Arbitrary File Upload
Slug
kata-plus
Published
2024-10-28
Title
Kata Plus – Addons for Elementor – Widgets, Extensions and Templates < 1.5.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
kata-plus
Published
2024-10-25
Title
Kata Plus < 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kata-plus
Published
2025-04-15
Title
Kata Plus < 1.5.4 - Unauthenticated PHP Object Injection
Slug
kata-plus
Published
2025-06-19
Title
Kata Plus < 1.5.4 - Missing Authorization
Slug
katalogportal-pdf-sync
Published
2026-04-14
Title
Katalogportal-pdf-sync Widget <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via 'katalogportal_shortcodePrinter' AJAX Action
Slug
kattene
Published
2024-04-09
Title
Kattene < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kau-boys-backend-localization
Published
2014-08-01
Title
Backend Localization 1.6.1 - options-general.php kau-boys_backend_localization_language Parameter XSS
Slug
kau-boys-backend-localization
Published
2014-08-01
Title
Backend Localization 1.6.1 - wp-login.php kau-boys_backend_localization_language Parameter XSS
Slug
kau-boys-backend-localization
Published
2023-09-29
Title
Backend Localization <= 2.1.10 - Settings Update via CSRF
Slug
kaya-qr-code-generator
Published
2023-04-18
Title
Kaya QR Code Generator < 1.5.3 - Contributor+ Stored XSS
Slug
kb-support
Published
2022-04-15
Title
KB Support < 1.5.6 - Unauthenticated Stored Cross-Site Scripting
Slug
kb-support
Published
2024-04-25
Title
KB Support < 1.6.1 - Missing Authorization
Slug
kb-support
Published
2024-09-30
Title
KB Support < 1.6.7 - Subscriber+ Multiple Administrator Actions
Slug
kb-support
Published
2024-09-30
Title
KB Support < 1.6.7 - Unauthenticated Ticket Reply Exposure
Slug
kb-support
Published
2025-01-24
Title
KB Support < 1.6.8 - Unauthenticated Open Redirect
Slug
kb-support
Published
2025-04-04
Title
KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin <= 1.7.4 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory