WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
lenxel-core
Published
2024-11-08
Title
Lenxel Core for Lenxel(LNX) LMS < 1.2.5 - Author+ Stored XSS via SVG File Upload
Slug
lenxel-core
Published
2024-11-29
Title
Lenxel Core <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lenxel-core
Published
2024-11-29
Title
Lenxel Core <= 1.1 - Authenticated (Contributor+) Local File Inclusion
Slug
leopard-wordpress-offload-media
Published
2024-08-12
Title
Leopard - WordPress offload media <= 2.0.36 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
leopard-wordpress-offload-media
Published
2024-08-12
Title
Leopard - WordPress offload media <= 2.0.36 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
leopard-wordpress-offload-media
Published
2024-11-08
Title
Leopard < 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
lessbuttons
Published
2025-05-07
Title
LessButtons Social Sharing and Statistics <= 1.6.1 - Cross-Site Request Forgery
Slug
let-them-unsubscribe
Published
2014-08-01
Title
Let Them Unsubscribe 1.0 - let-them-unsubscribe.php Multiple Unspecified Issues
Slug
lets-box
Published
2021-12-13
Title
Lets Box < 1.13.3 - Reflected Cross-Site Scripting
Slug
letsrecover-woocommerce-abandoned-cart
Published
2022-12-09
Title
LetsRecover < 1.2.0 - Admin+ SQLi
Slug
letsrecover-woocommerce-abandoned-cart
Published
2022-12-09
Title
LetsRecover < 1.2.0 - Admin+ SQLi
Slug
letsrecover-woocommerce-abandoned-cart
Published
2022-12-12
Title
LetsRecover < 1.2.0 - Unauthenticated SQLi
Slug
letterpress
Published
2023-05-11
Title
LetterPress <= 1.2.1 - Admin+ Stored Cross-Site Scripting
Slug
letterpress
Published
2024-04-18
Title
LetterPress <= 1.2.2 - Subscriber Deletion via CSRF
Slug
levelfourstorefront
Published
2014-08-01
Title
Shopping Cart 8.1.14 - Shell Upload, SQL Injection
Slug
levelfourstorefront
Published
2014-08-01
Title
Level Four Storefront - levelfourstorefront/getsortmanufacturers.php id Parameter SQL Injection
Slug
lexicata
Published
2025-02-18
Title
Lexicata <= 1.0.16 - Reflected Cross-Site Scripting
Slug
lexicata
Published
2025-04-02
Title
Lexicata <= 1.0.16 - Reflected Cross-Site Scripting
Slug
leyka
Published
2023-03-03
Title
Leyka < 3.30 - Unauthenticated Stored XSS
Slug
leyka
Published
2023-05-22
Title
Leyka < 3.30.2 - Reflected XSS
Slug
leyka
Published
2023-05-22
Title
Leyka < 3.30.3 - Subscriber+ Privilege Escalation
Slug
leyka
Published
2023-08-07
Title
Leyka < 3.30.3 - Reflected XSS
Slug
leyka
Published
2023-08-23
Title
Leyka < 3.30.4 - Admin+ Stored XSS
Slug
leyka
Published
2023-09-12
Title
Leyka < 3.30.7.1 - Subscriber+ Sensitive Information Disclosure
Slug
leyka
Published
2024-06-06
Title
Leyka < 3.31.2 - Missing Authorization