WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
league-of-legends-shortcodes
Published
2024-10-24
Title
League of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
league-table-lite
Published
2023-11-23
Title
League Table < 1.14 - Tables Cloning/Update/Deletion via CSRF
Slug
leaguemanager
Published
2014-08-01
Title
LeagueManager <= 3.7 - wp-admin/admin.php Multiple Parameter XSS
Slug
leaguemanager
Published
2014-08-01
Title
LeagueManager 3.8 - SQL Injection
Slug
leaguemanager
Published
2015-06-02
Title
LeagueManager <= 3.9.11 - Unauthenticated SQL Injection
Slug
leaky-paywall
Published
2021-10-18
Title
Leaky Paywall < 4.16.7 - Admin+ Stored Cross-Site Scripting
Slug
leaky-paywall
Published
2024-04-25
Title
Leaky Paywall < 4.20.9 - Missing Authorization to Price Manipulation
Slug
leaky-paywall
Published
2024-07-06
Title
Leaky Paywall < 4.21.3 - Cross-Site Request Forgery
Slug
leaky-paywall
Published
2025-03-28
Title
Leaky Paywall < 4.21.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
leaky-paywall
Published
2025-12-10
Title
Leaky Paywall < 5.0 - Missing Authorization
Slug
lean-wp
Published
2022-01-24
Title
WP Dependency Installer < 4.3.1 - Subscriber+ Arbitrary Plugin Activation
Slug
lean-wp
Published
2022-01-24
Title
WP Dependency Installer < 4.3.1 - Arbitrary Plugin Installation from Dependency via CSRF
Slug
leanpress
Published
2024-11-19
Title
LeanPress <= 1.0.0 - Reflected Cross-Site Scripting
Slug
learn-manager
Published
2021-05-24
Title
WP LMS < 1.1.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
learn-manager
Published
2021-08-02
Title
WP LMS < 1.1.5 - Unauthenticated Arbitrary User Field Edition/Creation
Slug
learning-management-system
Published
2023-07-10
Title
LMS by Masteriyo < 1.6.8 - Information Exposure
Slug
learning-management-system
Published
2024-04-05
Title
Masteriyo - LMS < 1.7.3 - Unauthenticated Privilege Escalation
Slug
learning-management-system
Published
2024-04-30
Title
Masteriyo - LMS < 1.7.4 - Insecure Direct Object Reference
Slug
learning-management-system
Published
2024-08-07
Title
Masteriyo - LMS < 1.11.5 - Missing Authorization
Slug
learning-management-system
Published
2024-08-07
Title
Masteriyo - LMS < 1.12.0 - Missing Authorization
Slug
learning-management-system
Published
2024-08-12
Title
Masteriyo - LMS < 1.11.5 - Authenticated (Student+) Insecure Direct Object Reference
Slug
learning-management-system
Published
2024-10-28
Title
Masteriyo LMS < 1.13.4 - Subscriber+ Privilege Escalation
Slug
learning-management-system
Published
2024-10-28
Title
Masteriyo LMS – eLearning and Online Course Builder for WordPress < 1.13.4 - Authenticated (Student+) Stored Cross-Site Scripting via Ask a Question Functionality
Slug
learning-management-system
Published
2025-07-30
Title
Masteriyo - LMS < 1.18.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
learning-management-system
Published
2025-11-30
Title
Masteriyo - LMS < 2.0.4 - Authenticated (Subscriber+) Sensitive Information Exposure