WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
library-management-system
Published
2025-10-14
Title
Library Management System < 3.2 - Missing Authorization to Authenticated (Subscriber+) Settings Manipulation
Slug
library-viewer
Published
2023-09-04
Title
Library Viewer < 2.0.6.1 - Contributor+ Stored XSS
Slug
libreform
Published
2022-07-22
Title
WP Libre Form 2-2.0.8 - Unauthenticated Arbitrary Submissions Listing & Deletion
Slug
libro-de-reclamaciones
Published
2025-04-25
Title
Libro de Reclamaciones <= 1.0.1 - Reflected Cross-Site Scripting
Slug
libro-de-reclamaciones-y-quejas
Published
2025-04-04
Title
Libro de Reclamaciones y Quejas <= 1.0 - Stored XSS via CSRF
Slug
libro-de-reclamaciones-y-quejas
Published
2025-06-05
Title
Libro de Reclamaciones y Quejas < 1.0 - Authenticated (Administrator+) SQL Injection
Slug
libsyn-podcasting
Published
2023-10-13
Title
Libsyn Publisher Hub <= 1.4.4 - Reflected XSS
Slug
libsyn-podcasting
Published
2023-10-13
Title
Libsyn Publisher Hub <= 1.4.4 - Sensitive Information Exposure
Slug
libsyn-podcasting
Published
2024-04-12
Title
Libsyn Publisher Hub <= 1.4.4 - Cross-Site Request Forgery
Slug
libsyn-podcasting
Published
2024-04-12
Title
Libsyn Publisher Hub <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
license-envato
Published
2025-04-10
Title
License For Envato < 1.1.0 - Reflected Cross-Site Scripting
Slug
license-envato
Published
2025-04-21
Title
License For Envato < 1.1.0 - Unauthenticated Local File Inclusion
Slug
license-manager-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
license-manager-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
license-manager-for-woocommerce
Published
2023-11-23
Title
License Manager for WooCommerce < 2.2.11 - Authenticated (Administrator+) SQL Injection
Slug
license-manager-for-woocommerce
Published
2024-06-20
Title
License Manager for WooCommerce < 3.0.7 - Improper Authorization to Authenticated(Contributor+) Sensitive Information Exposure
Slug
license-manager-for-woocommerce
Published
2025-04-10
Title
License Manager for WooCommerce < 3.0.10 - Reflected Cross-Site Scripting
Slug
license-manager-for-woocommerce
Published
2025-09-05
Title
License Manager for WooCommerce < 3.0.13 - Admin+ SQL Injection
Slug
lifeline-donation
Published
2024-06-19
Title
Lifeline Donation <= 1.2.6 - Authentication Bypass
Slug
lifepress
Published
2025-08-20
Title
LifePress < 2.2 - Missing Authorization
Slug
lifterlms
Published
2019-09-09
Title
LifterLMS < 3.35.1 - Unauthenticated Options Import
Slug
lifterlms
Published
2020-03-31
Title
LifterLMS < 3.37.15 - Arbitrary File Writing
Slug
lifterlms
Published
2021-05-10
Title
LifterLMS < 4.21.1 - Reflected Cross-Site Scripting (XSS) via Coupon Code in Checkout
Slug
lifterlms
Published
2021-05-10
Title
LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile
Slug
lifterlms
Published
2021-05-17
Title
LifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDOR