WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kingcomposer
Published
2019-02-05
Title
KingComposer - Reflected Cross-Site Scripting
Slug
kingcomposer
Published
2019-04-23
Title
KingComposer - Authenticated Stored XSS
Slug
kingcomposer
Published
2020-06-15
Title
KingComposer < 2.9.4 - Multiple Critical Issues
Slug
kingcomposer
Published
2020-07-09
Title
KingComposer < 2.9.5 - Unauthenticated Reflected Cross-Site Scripting
Slug
kingcomposer
Published
2022-02-16
Title
Page Builder KingComposer <= 2.9.6 - Open Redirect
Slug
kingcomposer
Published
2022-03-14
Title
KingComposer <= 2.9.6 - Subscriber+ Stored Cross-Site Scripting
Slug
kingof
Published
2020-04-22
Title
M-Shield & kingof - Fake Malware Backdoor Plugins
Slug
kings-tab-slider
Published
2024-11-08
Title
Kings Tab Slider <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kino-gallery
Published
2014-08-01
Title
Kino Gallery 1.0 - Shell Upload
Slug
kintpv-connect
Published
2024-12-19
Title
Kintpv Wooconnect < 8.141 - Unauthenticated Stored Cross-Site Scripting
Slug
kioken-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
kioskprox
Published
2014-08-01
Title
kioskprox - XSS
Slug
kiotvietsync
Published
2025-04-15
Title
KiotViet Sync < 1.8.5 - Authenticated (Subscriber+) SQL Injection
Slug
kiotvietsync
Published
2025-04-18
Title
KiotViet Sync <= 1.8.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
kiotvietsync
Published
2025-10-20
Title
KiotViet Sync <= 1.8.5 - Missing Authorization
Slug
kiotvietsync
Published
2025-11-04
Title
KiotViet Sync <= 1.8.5 - Unauthenticated Webhook Key Exposure
Slug
kiotvietsync
Published
2025-11-04
Title
KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload
Slug
kiotvietsync
Published
2025-11-04
Title
KiotViet Sync <= 1.8.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
kiotvietsync
Published
2025-11-04
Title
KiotViet Sync <= 1.8.5 - Authorization Bypass via Use of Hard-coded Password
Slug
kirilkirkov-pdf-invoice-manager
Published
2026-02-10
Title
Invoct – PDF Invoices & Billing for WooCommerce < 1.7 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
Slug
kirimemail-woocommerce-integration
Published
2025-12-11
Title
Kirim.Email WooCommerce Integration <= 1.2.9 - Cross-Site Request Forgery to Settings Update
Slug
kirki
Published
2026-05-19
Title
Kirki < 6.0.7 - Subscriber+ Sensitive Data Exposure via kirki_wp_admin_get_apis Action
Slug
kirki
Published
2026-05-19
Title
Kirki < 6.0.7 - Unauthenticated Limited Arbitrary File Read and Deletion via downloadZIP
Slug
kirki
Published
2026-06-01
Title
Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'
Slug
kish-guest-posting
Published
2014-08-01
Title
Kish Guest Posting 1.2 - Arbitrary File Upload