WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
knight-lab-timelinejs
Published
2020-07-09
Title
Knight Lab Timeline < 3.7.0.0 - Outdated TimelineJS library could Lead to Stored XSS
Slug
knight-lab-timelinejs
Published
2024-03-15
Title
Knight Lab Timeline < 3.9.3.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
knight-lab-timelinejs
Published
2024-04-16
Title
Knight Lab Timeline <= 3.9.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
knowband-mobile-app-builder-for-woocommerce
Published
2025-12-10
Title
Knowband Mobile App Builder for wooCommerce < 3.0.0 – Unauthenticated Arbitrary User Deletion
Slug
knowledge-base-maker
Published
2025-06-19
Title
Knowledge Base – Knowledge Base Maker <= 1.1.8 - Cross-Site Request Forgery
Slug
knowledgebase
Published
2024-11-01
Title
Knowledge Base < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
knowledgebase
Published
2025-06-05
Title
Knowledge Base < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
knowledgebase
Published
2025-07-17
Title
Knowledge Base < 2.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug
Slug
knowledgebase-helpdesk-pro
Published
2025-05-21
Title
KBx Pro Ultimate < 8.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
knowledgebase-helpdesk-pro
Published
2025-07-15
Title
KBx Pro Ultimate <= 8.0.5 - Unauthenticated PHP Object Injection
Slug
knr-author-list-widget
Published
2014-08-01
Title
KNR Author List Widget < 3.0.0 - Unauthenticated SQL Injection
Slug
knr-author-list-widget
Published
2025-01-07
Title
KNR Author List Widget <= 3.1.1 - Reflected Cross-Site Scripting
Slug
ko-fi-button
Published
2023-04-25
Title
Ko-fi Button < 1.3.3 - Admin+ Stored XSS
Slug
koalendar-free-booking-widget
Published
2024-12-13
Title
Koalendar < 1.0.3 - Contributor+ Stored XSS via height Parameter
Slug
kodex-posts-likes
Published
2023-04-19
Title
Kodex Posts likes < 2.5.0 - Settings Update via CSRF
Slug
kodex-posts-likes
Published
2024-08-09
Title
Kodex Posts likes <= 2.5.0 - Reflected Cross-Site Scripting
Slug
kodex-posts-likes
Published
2024-09-24
Title
Kodex Posts likes <= 2.5.0 - Reflected Cross-Site Scripting
Slug
kodex-posts-likes
Published
2024-09-23
Title
Kodex Posts likes <= 2.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
kodex-posts-likes
Published
2024-10-24
Title
Kodex Posts likes <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kodo-qiniu
Published
2024-02-23
Title
KODO Qiniu < 1.5.1 - Cross-Site Request Forgery
Slug
koko-analytics
Published
2024-09-23
Title
Koko Analytics < 1.3.13 - Reflected Cross-Site Scripting
Slug
koko-analytics
Published
2026-01-20
Title
Koko Analytics < 2.1.3 - Unauthenticated SQL Injection
Slug
kona-instagram-feed-for-gutenberg
Published
2025-01-30
Title
Kona Gallery Block <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kona-instagram-feed-for-gutenberg
Published
2025-02-03
Title
Kona Gallery Block <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
konami-easter-egg
Published
2025-06-05
Title
Konami Easter Egg <= v0.4 - Cross-Site Request Forgery