WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
leaky-paywall
Published
2025-03-28
Title
Leaky Paywall < 4.21.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
leaky-paywall
Published
2025-12-10
Title
Leaky Paywall <= 4.22.5 - Missing Authorization
Slug
lean-wp
Published
2022-01-24
Title
WP Dependency Installer < 4.3.1 - Subscriber+ Arbitrary Plugin Activation
Slug
lean-wp
Published
2022-01-24
Title
WP Dependency Installer < 4.3.1 - Arbitrary Plugin Installation from Dependency via CSRF
Slug
leanpress
Published
2024-11-19
Title
LeanPress <= 1.0.0 - Reflected Cross-Site Scripting
Slug
learn-manager
Published
2021-05-24
Title
WP LMS < 1.1.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
learn-manager
Published
2021-08-02
Title
WP LMS < 1.1.5 - Unauthenticated Arbitrary User Field Edition/Creation
Slug
learning-management-system
Published
2023-07-10
Title
LMS by Masteriyo < 1.6.8 - Information Exposure
Slug
learning-management-system
Published
2024-04-05
Title
Masteriyo - LMS < 1.7.3 - Unauthenticated Privilege Escalation
Slug
learning-management-system
Published
2024-04-30
Title
Masteriyo - LMS < 1.7.4 - Insecure Direct Object Reference
Slug
learning-management-system
Published
2024-08-07
Title
Masteriyo - LMS < 1.11.5 - Missing Authorization
Slug
learning-management-system
Published
2024-08-07
Title
Masteriyo - LMS < 1.12.0 - Missing Authorization
Slug
learning-management-system
Published
2024-08-12
Title
Masteriyo - LMS < 1.11.5 - Authenticated (Student+) Insecure Direct Object Reference
Slug
learning-management-system
Published
2024-10-28
Title
Masteriyo LMS – eLearning and Online Course Builder for WordPress < 1.13.4 - Authenticated (Student+) Missing Authorization to Privilege Escalation
Slug
learning-management-system
Published
2024-10-28
Title
Masteriyo LMS – eLearning and Online Course Builder for WordPress < 1.13.4 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality
Slug
learning-management-system
Published
2025-07-30
Title
Masteriyo - LMS < 1.18.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
learning-management-system
Published
2025-11-30
Title
Masteriyo - LMS < 2.0.4 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
learning-management-system-pro
Published
2025-07-01
Title
Masteriyo LMS PRO < 2.20.1 - Unauthenticated Privilege Escalation
Slug
learnpress
Published
2020-03-16
Title
LearnPress < 3.2.6.7 - Privilege Escalation
Slug
learnpress
Published
2020-04-28
Title
LearnPress < 3.2.6.9 - Authenticated Post Creation and Status Modification
Slug
learnpress
Published
2020-04-29
Title
Learnpress < 3.2.6.8 - Authenticated Time Based Blind SQL Injection
Slug
learnpress
Published
2020-04-28
Title
LearnPress < 3.2.6.9 - Privilege Escalation to "LP Instructor"
Slug
learnpress
Published
2020-09-09
Title
LearnPress < 3.2.7.3 - CSRF & XSS
Slug
learnpress
Published
2021-10-18
Title
LearnPress < 4.1.3.2 - Admin+ Stored Cross-Site Scripting
Slug
learnpress
Published
2021-11-09
Title
LearnPress < 4.1.4 - Admin+ SQL Injection