WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
keywords-highlight-tool
Published
2025-04-03
Title
Search engine keywords highlighter <= 0.1.3 - Reflected Cross-Site Scripting
Slug
keyy
Published
2025-10-14
Title
Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Slug
kh-easy-user-settings
Published
2024-12-11
Title
KH Easy User Settings <= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation
Slug
ki-live-video-conferences
Published
2025-06-05
Title
KI Live Video Conferences <= 5.5.15 - Unauthenticated Information Disclosure
Slug
ki-live-video-conferences
Published
2025-06-05
Title
KI Live Video Conferences <= 5.5.15 - Missing Authorization
Slug
kikfyre-events-calendar-tickets
Published
2025-02-03
Title
Event Kikfyre <= 2.1.8 - Missing Authorization
Slug
killer-theme-options
Published
2025-01-16
Title
Killer Theme Options <= 2.0 - Reflected Cross-Site Scripting
Slug
kimili-flash-embed
Published
2024-04-11
Title
Kimili Flash Embed <= 2.5.3 - Cross-Site Request Forgery
Slug
kimili-flash-embed
Published
2024-06-21
Title
Kimili Flash Embed <= 2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kineticpay-for-woocommerce
Published
2024-11-11
Title
kineticPay for WooCommerce < 3.0 - Unauthenticated Arbitrary File Upload
Slug
king-addons
Published
2025-03-27
Title
King Addons for Elementor < 24.12.59 - Missing Authorization
Slug
king-addons
Published
2025-10-21
Title
King Addons for Elementor < 51.1.37 - Unauthenticated Arbitrary File Upload
Slug
king-addons
Published
2025-10-21
Title
King Addons for Elementor < 51.1.37 - Unauthenticated Privilege Escalation
Slug
king-addons
Published
2025-08-18
Title
King Addons for Elementor <= 51.1.58 - Contributor+ Stored XSS
Slug
king-addons
Published
2025-08-18
Title
King Addons for Elementor <= 51.1.58 - Missing Authorization
Slug
king-addons
Published
2025-10-30
Title
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation
Slug
king-addons
Published
2025-12-12
Title
King Addons for Elementor <= 51.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
king-addons
Published
2026-03-22
Title
King Addons for Elementor < 51.1.51 - Unauthenticated API Keys Disclosure
Slug
king-addons
Published
2026-03-31
Title
King Addons for Elementor < 51.1.54 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets
Slug
king-ie
Published
2024-09-25
Title
king_IE <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
kingcomposer
Published
2019-02-05
Title
KingComposer - Reflected Cross-Site Scripting
Slug
kingcomposer
Published
2019-04-23
Title
KingComposer - Authenticated Stored XSS
Slug
kingcomposer
Published
2020-06-15
Title
KingComposer < 2.9.4 - Multiple Critical Issues
Slug
kingcomposer
Published
2020-07-09
Title
KingComposer < 2.9.5 - Unauthenticated Reflected Cross-Site Scripting
Slug
kingcomposer
Published
2022-02-16
Title
Page Builder KingComposer <= 2.9.6 - Open Redirect