WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
landing-page-cat
Published
2024-12-17
Title
Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages < 1.7.8 - Reflected Cross-Site Scripting
Slug
landing-page-cat
Published
2025-04-14
Title
Landing Page Cat < 1.7.9 - Reflected Cross-Site Scripting
Slug
landing-pages
Published
2014-08-01
Title
WordPress Landing Pages < 1.2.3 - module.utils.php post Parameter SQL Injection
Slug
landing-pages
Published
2014-08-01
Title
WordPress Landing Pages < 1.2.3 - module.redirect-ab-testing.php permalink_name Parameter SQL Injection
Slug
landing-pages
Published
2015-05-25
Title
WordPress Landing Pages <= 1.8.4 - XSS & SQL Injection
Slug
landing-pages
Published
2015-06-25
Title
WordPress Landing Pages <= 1.8.7 - Unspecified Cross-Site Scripting (XSS)
Slug
landing-pages
Published
2015-09-30
Title
WordPress Landing Pages 1.8.8-1.9.0 - Unauthenticated Remote Command Execution
Slug
landing-pages
Published
2016-08-03
Title
WordPress Landing Pages <= 2.2.4 - Reflected Cross-Site Scripting (XSS)
Slug
landing-pages-and-domain-aliases
Published
2025-04-24
Title
Landing pages and Domain aliases for WordPress <= 0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
landingi-landing-pages
Published
2024-03-28
Title
Landingi Landing Pages < 3.1.2 - Cross-Site Request Forgery
Slug
language-bar-flags
Published
2021-08-16
Title
Language Bar Flags <= 1.0.8 - CSRF to Stored XSS
Slug
language-field
Published
2025-04-09
Title
Language Field <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
language-icons-flags-switcher
Published
2025-03-31
Title
Flag Icons <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
language-switcher
Published
2024-10-10
Title
Language Switcher < 3.8.0 - Reflected Cross-Site Scripting
Slug
language-switcher-for-transposh
Published
2024-04-19
Title
Language Switcher for Transposh < 1.6.0 - Reflected Cross-Site Scripting
Slug
laposta
Published
2024-07-12
Title
Laposta <= 1.12 - Unauthenticated Full Path Disclosure
Slug
laposta-signup-basic
Published
2023-10-06
Title
Laposta Signup Basic < 1.4.2 - CSRF
Slug
laposta-signup-basic
Published
2023-09-05
Title
Laposta Signup Basic < 1.4.2 - Missing Authorization
Slug
laposta-woocommerce
Published
2025-08-17
Title
Laposta WooCommerce < 1.9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
lara-google-analytics
Published
2019-10-14
Title
Lara Google Analytics < 2.0.5 - Authenticated Stored XSS
Slug
larsens-calender
Published
2021-04-09
Title
Larsens Calender <= 1.2 - Stored Cross-Site Scripting (XSS)
Slug
laser
Published
2025-12-11
Title
Laser <= 1.1.1 - Missing Authorization
Slug
last-updated-shortcode
Published
2025-09-22
Title
Last Updated Shortcode <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
last-viewed-posts
Published
2024-05-02
Title
Last Viewed Posts by WPBeginner < 1.0.1 - Unauthenticated PHP Object Injection
Slug
last-viewed-posts
Published
2024-12-10
Title
Last Viewed Posts by WPBeginner < 1.0.2 - Unauthenticated Sensitive Information Exposure