WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kento-ads-rotator
Published
2024-10-31
Title
Kento Ads Rotator <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kento-latest-tabs
Published
2026-01-06
Title
Latest Tabs <= 1.5 - Cross-Site Request Forgery to Plugin's Settings Update
Slug
kento-post-view-counter
Published
2016-04-17
Title
Kento Post View Counter <= 2.8 - CSRF & multiple XSS
Slug
kento-splash-screen
Published
2025-08-21
Title
Kento Splash Screen <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
kento-wp-stats
Published
2025-03-28
Title
Kento WordPress Stats <= 1.1 - Reflected Cross-Site Scripting
Slug
ketchup-restaurant-reservations
Published
2022-09-06
Title
Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi
Slug
ketchup-restaurant-reservations
Published
2022-09-06
Title
Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Stored XSS
Slug
ketchup-shortcodes-pack
Published
2025-01-21
Title
Ketchup Shortcodes < 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ketchup-shortcodes-pack
Published
2025-01-24
Title
Ketchup Shortcodes < 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kevins-plugin
Published
2024-11-22
Title
Kevin's <= 2.0.0 - Cross-Site Request Forgery
Slug
key-figures
Published
2026-01-06
Title
Key Figures <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting via kf_field_figure_default_color_render
Slug
key4ce-osticket-bridge
Published
2025-03-24
Title
Key4ce osTicket Bridge <= 1.4.0 - Reflected Cross-Site Scripting
Slug
keycaptcha
Published
2025-04-09
Title
KeyCAPTCHA <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
keydatas
Published
2024-07-16
Title
简数采集器 (Keydatas) < 2.6.1 - Unauthenticated Arbitrary File Upload
Slug
keydatas
Published
2025-11-20
Title
简数采集器 < 2.6.4 - Authenticated (Admin+) Arbitrary File Read
Slug
keymaster-chord-notation-free
Published
2024-11-08
Title
Keymaster Chord Notation Free <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
keyring
Published
2014-08-01
Title
Keyring <= 1.5 - OAuth Example Page XSS
Slug
keyword-meta
Published
2021-08-09
Title
Keywords & Meta <= 3.0 - CSRF to Stored Cross-Site Scripting (XSS)
Slug
keyword-strategy-internal-links
Published
2014-04-28
Title
Keyword Strategy Internal Links <= 2.0 - XSS
Slug
keywords-highlight-tool
Published
2025-04-03
Title
Search engine keywords highlighter <= 0.1.3 - Reflected Cross-Site Scripting
Slug
keyy
Published
2025-10-14
Title
Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Slug
kh-easy-user-settings
Published
2024-12-11
Title
KH Easy User Settings <= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation
Slug
ki-live-video-conferences
Published
2025-06-05
Title
KI Live Video Conferences <= 5.5.15 - Unauthenticated Information Disclosure
Slug
ki-live-video-conferences
Published
2025-06-05
Title
KI Live Video Conferences <= 5.5.15 - Missing Authorization
Slug
kikfyre-events-calendar-tickets
Published
2025-02-03
Title
Event Kikfyre <= 2.1.8 - Missing Authorization