WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
listdom
Published
2025-04-16
Title
Listdom < 4.1.0 - Open Redirect
Slug
listdom
Published
2025-12-15
Title
Listdom < 5.1.0 - Missing Authorization
Slug
listeo-core
Published
2025-08-20
Title
Listeo-Core <= 1.9.32 - Authenticated (Subscriber+) SQL Injection
Slug
listeo-core
Published
2026-01-06
Title
Listeo Core < 2.0.19 - Reflected Cross-Site Scripting
Slug
listinghub
Published
2026-01-07
Title
ListingHub 1.2.6 - Unauthenticated Stored Cross-Site Scripting
Slug
listingpro-lead-form
Published
2025-10-19
Title
ListingPro Lead Form <= 1.0.2 - Missing Authorization
Slug
listingpro-lead-form
Published
2025-10-19
Title
ListingPro Lead Form <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
listingpro-plugin
Published
2024-07-22
Title
ListingPro Plugin <= 2.9.3 - Unauthenticated Local File Inclusion
Slug
listingpro-plugin
Published
2024-07-22
Title
ListingPro Plugin <= 2.9.3 - Unauthenticated SQL Injection
Slug
listingpro-plugin
Published
2024-07-22
Title
ListingPro Plugin <= 2.9.3 - Authenticated (Subscriber+) SQL Injection
Slug
listingpro-plugin
Published
2024-07-22
Title
ListingPro Plugin <= 2.9.3 - Authenticated (Author+) Local File Inclusion
Slug
listingpro-plugin
Published
2025-09-26
Title
ListingPro <= 2.9.8 - Missing Authorization
Slug
listingpro-plugin
Published
2025-10-19
Title
ListingPro <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
listingpro-reviews
Published
2025-09-22
Title
ListingPro Reviews <= 1.6 - Missing Authorization
Slug
listingpro-reviews
Published
2025-12-31
Title
ListingPro Reviews <= 1.7 - Reflected Cross-Site Scripting
Slug
listings-for-appfolio
Published
2025-02-03
Title
Listings for Appfolio < 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
listings-for-buildium
Published
2025-04-11
Title
Listings for Buildium < 0.1.6 - Stored XSS via CSRF
Slug
listly
Published
2025-07-17
Title
Listly: Listicles For WordPress <= 2.7 - Unauthenticated Arbitrary Transient Deletion
Slug
listmanager
Published
2014-09-27
Title
Lyris List Manager 8.95a - Cross-Site Scripting (XSS)
Slug
listplus
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
lite-wp-logger
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
litespeed-cache
Published
2020-12-26
Title
LiteSpeed Cache < 3.6.1 - Authenticated Stored Cross-Site Scripting
Slug
litespeed-cache
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site Scripting
Slug
litespeed-cache
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS
Slug
litespeed-cache
Published
2023-03-22
Title
LiteSpeed Cache <= 5.3 - CSRF