WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
light-poll
Published
2024-07-11
Title
Light Poll <= 1.0.0 - Polls Deletion via CSRF
Slug
lightbox
Published
2016-11-13
Title
Lightbox <= 1.6.7 - Cross-Site Scripting (XSS)
Slug
lightbox-block
Published
2025-07-16
Title
LightBox Block < 1.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lightbox-gallery
Published
2023-01-18
Title
Lightbox Gallery < 0.9.5 - Contributor+ Stored XSS via Shortcode
Slug
lightbox-photo-gallery
Published
2014-12-14
Title
Lightbox Photo Gallery 1.0 - CSRF/XSS
Slug
lightbox-plus
Published
2016-04-05
Title
Lightbox Plus < 2.8 - CSRF to XSS
Slug
lightbox-popup
Published
2023-01-23
Title
Image and Video Lightbox, Image PopUp < 2.1.6 - Admin+ Stored XSS
Slug
lightgallerywp
Published
2025-11-19
Title
Multiple Plugins and Themes - Contributor+ DOM-Based Stored XSS via lightGallery Library
Slug
lightview-plus
Published
2025-03-24
Title
Lightview Plus <= 3.1.3 - Reflected Cross-Site Scripting
Slug
lightweight-accordion
Published
2023-01-23
Title
Lightweight Accordion < 1.5.15 - Contributor+ Stored XSS
Slug
lightweight-accordion
Published
2024-03-22
Title
Lightweight Accordion < 1.5.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
lightweight-accordion
Published
2025-12-14
Title
Lightweight Accordion < 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lightweight-and-responsive-youtube-embed
Published
2025-04-01
Title
Lightweight and Responsive Youtube Embed <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lightweight-and-responsive-youtube-embed
Published
2025-04-01
Title
Lightweight and Responsive Youtube Embed <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
like-box
Published
2023-01-23
Title
Social Like Box and Page by WpDevArt < 0.8.41 - Contributor+ Stored XSS
Slug
like-box
Published
2023-01-20
Title
Social Like Box and Page by WpDevArt < 0.8.40 - Admin+ Stored XSS
Slug
like-dislike-plus-counter
Published
2025-02-02
Title
Like dislike plus counter | Like Dislike Buttons <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
like-dislike-voting
Published
2025-12-11
Title
Like DisLike Voting <= 1.0.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
like-it
Published
2025-11-17
Title
Like-it <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
like-on-vkontakte
Published
2024-12-12
Title
Like in Vk.com <= 0.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
like-share-my-site
Published
2025-07-21
Title
Like & Share My Site <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
likebot
Published
2025-01-16
Title
LikeBot – Decentralized like-system <= 0.85 - Admin+ Stored XSS via CSRF
Slug
likebtn-like-button
Published
2017-11-02
Title
Like Button Rating < 2.5.4 - Unauthenticated Arbitrary Blog Settings Change
Slug
likebtn-like-button
Published
2021-02-06
Title
Like Button Rating < 2.6.32 - Unauthenticated Full-Read SSRF
Slug
likebtn-like-button
Published
2021-11-11
Title
Like Button Rating < 2.6.38 - Unauthorised Vote Export to Email & IP Addresses Disclosure