WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
lets-box
Published
2021-12-13
Title
Lets Box < 1.13.3 - Reflected Cross-Site Scripting
Slug
lets-box
Published
2026-09-17
Title
WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import
Slug
letsrecover-woocommerce-abandoned-cart
Published
2022-12-09
Title
LetsRecover < 1.2.0 - Admin+ SQLi
Slug
letsrecover-woocommerce-abandoned-cart
Published
2022-12-09
Title
LetsRecover < 1.2.0 - Admin+ SQLi
Slug
letsrecover-woocommerce-abandoned-cart
Published
2022-12-12
Title
LetsRecover < 1.2.0 - Unauthenticated SQLi
Slug
letterpress
Published
2023-05-11
Title
LetterPress <= 1.2.2 - Admin+ Stored Cross-Site Scripting
Slug
letterpress
Published
2024-04-18
Title
LetterPress < 2.4.0 - Subscriber Deletion via CSRF
Slug
letterpress
Published
2026-10-27
Title
LetterPress < 2.4.0 - Admin+ Stored XSS
Slug
levelfourstorefront
Published
2014-08-01
Title
Shopping Cart 8.1.14 - Shell Upload, SQL Injection
Slug
levelfourstorefront
Published
2014-08-01
Title
Level Four Storefront - levelfourstorefront/getsortmanufacturers.php id Parameter SQL Injection
Slug
lexicata
Published
2025-02-18
Title
Lexicata <= 1.0.16 - Reflected Cross-Site Scripting
Slug
lexicata
Published
2025-04-02
Title
Lexicata <= 1.0.16 - Reflected Cross-Site Scripting
Slug
leyka
Published
2023-03-03
Title
Leyka < 3.30 - Unauthenticated Stored XSS
Slug
leyka
Published
2023-05-22
Title
Leyka < 3.30.2 - Reflected XSS
Slug
leyka
Published
2023-05-22
Title
Leyka < 3.30.3 - Subscriber+ Privilege Escalation
Slug
leyka
Published
2023-08-07
Title
Leyka < 3.30.3 - Reflected XSS
Slug
leyka
Published
2023-08-23
Title
Leyka < 3.30.4 - Admin+ Stored XSS
Slug
leyka
Published
2023-09-12
Title
Leyka < 3.30.7.1 - Subscriber+ Sensitive Information Disclosure
Slug
leyka
Published
2024-06-06
Title
Leyka < 3.31.2 - Missing Authorization
Slug
leyka
Published
2024-10-14
Title
Leyka < 3.31.7 - Missing Authorization
Slug
leyka
Published
2025-02-14
Title
Leyka < 3.31.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
leyka
Published
2025-06-27
Title
Leyka <= 3.31.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
leyka
Published
2025-07-01
Title
Leyka <= 3.31.9 - Unauthenticated Local File Inclusion
Slug
leyka
Published
2026-08-19
Title
Leyka <= 3.32.3 - Missing Authorization
Slug
leyka
Published
2026-10-07
Title
Leyka <= 3.32.3 - Authenticated (Administrator+) SQL Injection