WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kattene
Published
2024-04-09
Title
Kattene < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kau-boys-backend-localization
Published
2014-08-01
Title
Backend Localization 1.6.1 - options-general.php kau-boys_backend_localization_language Parameter XSS
Slug
kau-boys-backend-localization
Published
2014-08-01
Title
Backend Localization 1.6.1 - wp-login.php kau-boys_backend_localization_language Parameter XSS
Slug
kau-boys-backend-localization
Published
2023-09-29
Title
Backend Localization <= 2.1.10 - Settings Update via CSRF
Slug
kaya-qr-code-generator
Published
2023-04-18
Title
Kaya QR Code Generator < 1.5.3 - Contributor+ Stored XSS
Slug
kb-support
Published
2022-04-15
Title
KB Support < 1.5.6 - Unauthenticated Stored Cross-Site Scripting
Slug
kb-support
Published
2024-04-25
Title
KB Support < 1.6.1 - Missing Authorization
Slug
kb-support
Published
2024-09-30
Title
KB Support < 1.6.7 - Subscriber+ Multiple Administrator Actions
Slug
kb-support
Published
2024-09-30
Title
KB Support < 1.6.7 - Unauthenticated Ticket Reply Exposure
Slug
kb-support
Published
2025-01-24
Title
KB Support < 1.6.8 - Unauthenticated Open Redirect
Slug
kb-support
Published
2025-04-04
Title
KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin <= 1.7.4 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
kbslider
Published
2014-08-24
Title
KenBurner Slider - Unauthenticated Arbitrary File Download
Slug
kbucket
Published
2024-06-05
Title
kbucket < 4.1.6 - Admin+ Stored XSS
Slug
kbucket
Published
2024-06-05
Title
kbucket < 4.1.5 - Reflected XSS
Slug
kbucket
Published
2024-11-11
Title
KBucket < 4.2.3 - Subscriber+ Arbitrary File Upload
Slug
kbucket
Published
2025-01-24
Title
KBucket < 4.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
kd-coming-soon
Published
2023-10-24
Title
KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle
Slug
keep-backup-daily
Published
2022-05-23
Title
Keep Backup Daily < 2.0.3 - Reflected Cross-Site Scripting
Slug
keep-backup-daily
Published
2024-10-09
Title
Keep Backup Daily <= 2.1.1 - Unauthenticated Information Disclosure
Slug
keep-backup-daily
Published
2025-02-14
Title
Keep Backup Daily < 2.1.1 - Authenticated (Admin+) Arbitrary File Download
Slug
kenta-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
kenta-blocks
Published
2024-06-06
Title
Kenta Blocks – Responsive Blocks and block templates library < 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kenta-companion
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
kenta-companion
Published
2026-01-08
Title
Kenta Companion <= 1.3.3 - Cross-Site Request Forgery
Slug
kentha-elementor
Published
2026-01-24
Title
Kentha Elementor Widgets < 3.1 - Authenticated (Contributor+) Local File Inclusion