WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kbucket
Published
2024-06-05
Title
kbucket < 4.1.6 - Admin+ Stored XSS
Slug
kbucket
Published
2024-06-05
Title
kbucket < 4.1.5 - Reflected XSS
Slug
kbucket
Published
2024-11-11
Title
KBucket < 4.2.3 - Subscriber+ Arbitrary File Upload
Slug
kbucket
Published
2025-01-24
Title
KBucket < 4.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
kcaptcha
Published
2026-04-21
Title
Kcaptcha <= 1.0.1 - Cross-Site Request Forgery to Settings Update
Slug
kd-coming-soon
Published
2023-10-24
Title
KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle
Slug
keep-backup-daily
Published
2022-05-23
Title
Keep Backup Daily < 2.0.3 - Reflected Cross-Site Scripting
Slug
keep-backup-daily
Published
2024-10-09
Title
Keep Backup Daily <= 2.1.2 - Unauthenticated Information Disclosure
Slug
keep-backup-daily
Published
2025-02-14
Title
Keep Backup Daily < 2.1.1 - Authenticated (Admin+) Arbitrary File Download
Slug
keep-backup-daily
Published
2026-03-20
Title
Keep Backup Daily < 2.1.3 - Authenticated (Admin+) Limited Path Traversal via 'kbd_path' Parameter
Slug
keep-backup-daily
Published
2026-03-20
Title
Keep Backup Daily < 2.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Backup Title
Slug
keep-backup-daily
Published
2026-08-31
Title
Keep Backup Daily < 2.1.4 - Unauthenticated Sensitive Information Exposure
Slug
keepinmind-dashboard-notes
Published
2026-05-22
Title
KeepInMind - Dashboard Notes < 0.8.4.2 - Contributor+ Stored XSS
Slug
kenta-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
kenta-blocks
Published
2024-06-06
Title
Kenta Blocks – Responsive Blocks and block templates library < 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kenta-companion
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
kenta-companion
Published
2026-01-08
Title
Kenta Companion <= 1.3.3 - Cross-Site Request Forgery
Slug
kentha-elementor
Published
2026-01-24
Title
Kentha Elementor Widgets < 3.1 - Authenticated (Contributor+) Local File Inclusion
Slug
kento-ads-rotator
Published
2024-10-31
Title
Kento Ads Rotator <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kento-latest-tabs
Published
2026-01-06
Title
Latest Tabs <= 1.5 - Cross-Site Request Forgery to Plugin's Settings Update
Slug
kento-post-view-counter
Published
2016-04-17
Title
Kento Post View Counter <= 2.8 - CSRF & multiple XSS
Slug
kento-splash-screen
Published
2025-08-21
Title
Kento Splash Screen <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
kento-wp-stats
Published
2025-03-28
Title
Kento WordPress Stats <= 1.1 - Reflected Cross-Site Scripting
Slug
ketchup-restaurant-reservations
Published
2022-09-06
Title
Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi
Slug
ketchup-restaurant-reservations
Published
2022-09-06
Title
Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Stored XSS