WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
like-dislike-voting
Published
2025-12-11
Title
Like DisLike Voting <= 1.0.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
like-it
Published
2025-11-17
Title
Like-it <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
like-on-vkontakte
Published
2024-12-12
Title
Like in Vk.com <= 0.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
like-share-my-site
Published
2025-07-21
Title
Like & Share My Site <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
likebot
Published
2025-01-16
Title
LikeBot – Decentralized like-system <= 0.85 - Admin+ Stored XSS via CSRF
Slug
likebtn-like-button
Published
2017-11-02
Title
Like Button Rating < 2.5.4 - Unauthenticated Arbitrary Blog Settings Change
Slug
likebtn-like-button
Published
2021-02-06
Title
Like Button Rating < 2.6.32 - Unauthenticated Full-Read SSRF
Slug
likebtn-like-button
Published
2021-11-11
Title
Like Button Rating < 2.6.38 - Unauthorised Vote Export to Email & IP Addresses Disclosure
Slug
likebtn-like-button
Published
2022-05-23
Title
Like Button Rating < 2.6.45 - Arbitrary e-mail Sending
Slug
likebtn-like-button
Published
2024-08-29
Title
Like Button Rating < 2.6.54 - Cross-Site Request Forgery
Slug
likecoin
Published
2025-05-02
Title
Web3Press < 3.3.0 - Authenticated (Contributor+) Arbitrary File Read
Slug
likert-survey-master
Published
2025-09-20
Title
Likert Survey Master <= 0.8.0.1 - Reflected Cross-Site Scripting
Slug
lim4wp
Published
2014-08-01
Title
Lim4wp 1.1.1 - Arbitrary File Upload
Slug
limb-gallery
Published
2019-06-26
Title
Limb Gallery < 1.4.0 - Reflected Cross-Site Scripting
Slug
limb-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
limb-gallery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
limb-gallery
Published
2024-10-14
Title
WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
limb-gallery
Published
2024-10-14
Title
WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Download
Slug
lime-developer-login
Published
2025-01-16
Title
Lime Developer Login <= 1.4.0 - Reflected Cross-Site Scripting
Slug
limit-attempts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
limit-attempts
Published
2015-10-09
Title
Limit Attempts < 1.1.1 - SQL Injection
Slug
limit-attempts
Published
2024-03-28
Title
Limit Attempts by BestWebSoft < 1.3.0 - Reflected Cross-Site Scripting
Slug
limit-bio
Published
2025-02-20
Title
Limit Bio <= 1.0 - Stored XSS via CSRF
Slug
limit-bio
Published
2025-02-20
Title
Limit Bio <= 1.0 - Reflected XSS
Slug
limit-login-attempts
Published
2012-06-01
Title
Limit Login Attempts < 1.7.1 - Auth Cookies Brute Force Bypass