WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
lh-qr-codes
Published
2024-10-31
Title
LH QR Codes <= 1.06 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lh-signing
Published
2025-09-10
Title
LH Signing <= 2.83 - Cross-Site Request Forgery
Slug
liaison-site-prober
Published
2026-04-23
Title
Liaison Site Prober < 1.2.2 - Missing Authorization to Unauthenticated Information Exposure in '/logs' REST API Endpoint
Slug
library-bookshelves
Published
2024-11-18
Title
Library Bookshelves < 5.9 - Reflected Cross-Site Scripting
Slug
library-bookshelves
Published
2024-12-11
Title
Library Bookshelves < 5.9 - Reflected Cross-Site Scripting
Slug
library-bookshelves
Published
2025-02-17
Title
Library Bookshelves < 5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
library-bookshelves
Published
2025-09-22
Title
Library Bookshelves <= 5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
library-instruction-recorder
Published
2025-01-16
Title
Library Instruction Recorder <= 1.1.4 - Reflected Cross-Site Scripting
Slug
library-management-system
Published
2024-12-11
Title
Library Management System < 3.2.1 - Authenticated (Subscriber+) SQL Injection
Slug
library-management-system
Published
2024-12-06
Title
Library Management System <= 3.0.0 - Authenticated (Admin+) SQL Injection
Slug
library-management-system
Published
2025-10-14
Title
Library Management System < 3.2 - Missing Authorization to Authenticated (Subscriber+) Settings Manipulation
Slug
library-management-system
Published
2026-02-18
Title
Library Management System < 3.3 - Unauthenticated SQL Injection
Slug
library-management-system
Published
2026-06-22
Title
Library Management System < 3.5.8 - Unauthenticated SQL Injection via book_id
Slug
library-management-system
Published
2026-06-23
Title
Library Management System < 3.5.8 - Unauthenticated SQL Injection
Slug
library-viewer
Published
2023-09-04
Title
Library Viewer < 2.0.6.1 - Contributor+ Stored XSS
Slug
library-viewer
Published
2026-01-12
Title
Library Viewer < 3.2.0 - Reflected Cross-Site Scripting
Slug
libreform
Published
2022-07-22
Title
WP Libre Form 2-2.0.8 - Unauthenticated Arbitrary Submissions Listing & Deletion
Slug
libro-de-reclamaciones
Published
2025-04-25
Title
Libro de Reclamaciones <= 1.0.1 - Reflected Cross-Site Scripting
Slug
libro-de-reclamaciones-y-quejas
Published
2025-04-04
Title
Libro de Reclamaciones y Quejas <= 1.0 - Stored XSS via CSRF
Slug
libro-de-reclamaciones-y-quejas
Published
2025-06-05
Title
Libro de Reclamaciones y Quejas < 1.0 - Authenticated (Administrator+) SQL Injection
Slug
libsyn-podcasting
Published
2023-10-13
Title
Libsyn Publisher Hub <= 1.4.4 - Reflected XSS
Slug
libsyn-podcasting
Published
2023-10-13
Title
Libsyn Publisher Hub <= 1.4.4 - Sensitive Information Exposure
Slug
libsyn-podcasting
Published
2024-04-12
Title
Libsyn Publisher Hub <= 1.4.4 - Cross-Site Request Forgery
Slug
libsyn-podcasting
Published
2024-04-12
Title
Libsyn Publisher Hub <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
license-envato
Published
2025-04-10
Title
License For Envato < 1.1.0 - Reflected Cross-Site Scripting