WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
library-bookshelves
Published
2024-11-18
Title
Library Bookshelves < 5.9 - Reflected Cross-Site Scripting
Slug
library-bookshelves
Published
2024-12-11
Title
Library Bookshelves < 5.9 - Reflected Cross-Site Scripting
Slug
library-bookshelves
Published
2025-02-17
Title
Library Bookshelves < 5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
library-bookshelves
Published
2025-09-22
Title
Library Bookshelves <= 5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
library-instruction-recorder
Published
2025-01-16
Title
Library Instruction Recorder <= 1.1.4 - Reflected Cross-Site Scripting
Slug
library-management-system
Published
2024-12-11
Title
Library Management System < 3.2.1 - Authenticated (Subscriber+) SQL Injection
Slug
library-management-system
Published
2024-12-06
Title
Library Management System <= 3.0.0 - Authenticated (Admin+) SQL Injection
Slug
library-management-system
Published
2025-10-14
Title
Library Management System < 3.2 - Missing Authorization to Authenticated (Subscriber+) Settings Manipulation
Slug
library-management-system
Published
2026-02-18
Title
Library Management System < 3.3 - Unauthenticated SQL Injection
Slug
library-viewer
Published
2023-09-04
Title
Library Viewer < 2.0.6.1 - Contributor+ Stored XSS
Slug
library-viewer
Published
2026-01-12
Title
Library Viewer < 3.2.0 - Reflected Cross-Site Scripting
Slug
libreform
Published
2022-07-22
Title
WP Libre Form 2-2.0.8 - Unauthenticated Arbitrary Submissions Listing & Deletion
Slug
libro-de-reclamaciones
Published
2025-04-25
Title
Libro de Reclamaciones <= 1.0.1 - Reflected Cross-Site Scripting
Slug
libro-de-reclamaciones-y-quejas
Published
2025-04-04
Title
Libro de Reclamaciones y Quejas <= 1.0 - Stored XSS via CSRF
Slug
libro-de-reclamaciones-y-quejas
Published
2025-06-05
Title
Libro de Reclamaciones y Quejas < 1.0 - Authenticated (Administrator+) SQL Injection
Slug
libsyn-podcasting
Published
2023-10-13
Title
Libsyn Publisher Hub <= 1.4.4 - Reflected XSS
Slug
libsyn-podcasting
Published
2023-10-13
Title
Libsyn Publisher Hub <= 1.4.4 - Sensitive Information Exposure
Slug
libsyn-podcasting
Published
2024-04-12
Title
Libsyn Publisher Hub <= 1.4.4 - Cross-Site Request Forgery
Slug
libsyn-podcasting
Published
2024-04-12
Title
Libsyn Publisher Hub <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
license-envato
Published
2025-04-10
Title
License For Envato < 1.1.0 - Reflected Cross-Site Scripting
Slug
license-envato
Published
2025-04-21
Title
License For Envato < 1.1.0 - Unauthenticated Local File Inclusion
Slug
license-manager-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
license-manager-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
license-manager-for-woocommerce
Published
2023-11-23
Title
License Manager for WooCommerce < 2.2.11 - Authenticated (Administrator+) SQL Injection
Slug
license-manager-for-woocommerce
Published
2024-06-20
Title
License Manager for WooCommerce < 3.0.7 - Improper Authorization to Authenticated(Contributor+) Sensitive Information Exposure