WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
limit-attempts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
limit-attempts
Published
2015-10-09
Title
Limit Attempts < 1.1.1 - SQL Injection
Slug
limit-attempts
Published
2024-03-28
Title
Limit Attempts by BestWebSoft < 1.3.0 - Reflected Cross-Site Scripting
Slug
limit-bio
Published
2025-02-20
Title
Limit Bio <= 1.0 - Stored XSS via CSRF
Slug
limit-bio
Published
2025-02-20
Title
Limit Bio <= 1.0 - Reflected XSS
Slug
limit-login-attempts
Published
2012-06-01
Title
Limit Login Attempts < 1.7.1 - Auth Cookies Brute Force Bypass
Slug
limit-login-attempts
Published
2023-04-06
Title
Limit Login Attempts < 1.7.2 - Unauthenticated Stored XSS
Slug
limit-login-attempts
Published
2023-04-10
Title
Limit Login Attempts < 1.7.2 - Subscriber+ Stored XSS
Slug
limit-login-attempts-plus
Published
2024-09-18
Title
Limit Login Attempts Plus <= 1.1.0 - IP Address Spoofing to Protection Mechanism Bypass
Slug
limit-login-attempts-reloaded
Published
2020-12-14
Title
Limit Login Attempts Reloaded < 2.16.0 - Authenticated Reflected Cross-Site Scripting
Slug
limit-login-attempts-reloaded
Published
2020-12-14
Title
Limit Login Attempts Reloaded < 2.17.4 - Login Rate Limiting Bypass
Slug
limit-login-attempts-reloaded
Published
2023-11-06
Title
Limit Login Attempts Reloaded < 2.25.26 - Admin+ Missing Authorization to Toggle Plugin Auto-Update
Slug
limit-login-attempts-reloaded
Published
2023-12-20
Title
Limit Login Attempts Reloaded < 2.25.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
limit-login-attempts-reloaded
Published
2026-08-17
Title
Limit Login Attempts Reloaded < 3.3.5 - Username Denylist Bypass via Case Variant and Account Email
Slug
limit-max-ips-per-user
Published
2025-04-01
Title
Limit Max IPs Per User <= 1.5 - Reflected Cross-Site Scripting
Slug
linear
Published
2024-11-13
Title
Linear < 2.8.1 - Contributor+ Stored XSS
Slug
linear
Published
2025-01-08
Title
Linear < 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
linear
Published
2025-01-24
Title
Linear < 2.8.2 - Cross-Site Request Forgery to Cache Reset
Slug
linet-erp-woocommerce-integration
Published
2025-01-24
Title
Linet ERP-Woocommerce Integration < 3.5.8 - Cross-Site Request Forgery
Slug
linet-erp-woocommerce-integration
Published
2025-04-10
Title
Linet ERP-Woocommerce Integration < 3.6.0 - Authenticated (Admin+) Arbitrary File Read & Deletion
Slug
lingotek-translation
Published
2025-04-10
Title
Ray Enterprise Translation < 1.7.1 - Unauthenticated Local File Inclusion
Slug
lingotek-translation
Published
2025-09-05
Title
Ray Enterprise Translation <= 1.7.1 - Missing Authorization
Slug
lingotek-translation
Published
2025-08-30
Title
Ray Enterprise Translation < 1.7.2 - Unauthenticated Local File Inclusion
Slug
lingotek-translation
Published
2026-08-08
Title
Ray Enterprise Translation <= 1.7.3 - Subscriber+ Arbitrary API Token Update
Slug
lingotek-translation
Published
2026-08-08
Title
Ray Enterprise Translation <= 1.7.3 - Subscriber+ Language Addition and Deletion