WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
linkpizza-manager
Published
2026-02-21
Title
linkPizza-Manager <= 5.5.5 - Missing Authorization
Slug
linkpreview
Published
2025-02-24
Title
Phee's LinkPreview <= 1.6.7 - Cross-Site Request Forgery
Slug
links-in-captions
Published
2025-02-03
Title
Links in Captions <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
links-shortcode
Published
2025-09-27
Title
Links shortcode <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
linksy-search-and-replace
Published
2026-03-20
Title
Linksy Search and Replace <= 1.0.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Database Update via linksy_search_and_replace_item_details
Slug
linkworth-wp-plugin
Published
2022-08-01
Title
LinkWorth Plugin < 3.3.4 - Arbitrary Setting Update via CSRF
Slug
linkz-ai
Published
2024-10-10
Title
Linkz.ai < 1.2.0 - Subscriber+ Plugin Settings Update
Slug
linkz-ai
Published
2024-10-10
Title
Linkz.ai < 1.2.0 - Unauthenticated Plugin Settings Update
Slug
linux-promotional-plugin
Published
2025-08-15
Title
Linux Promotional Plugin <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
liquid-blocks
Published
2024-11-08
Title
LIQUID BLOCKS < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
liquid-chatgpt
Published
2025-11-24
Title
AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read
Slug
liquid-speech-balloon
Published
2023-04-19
Title
Liquid Speech Balloon < 1.2 - Settings Update via CSRF
Slug
lis-video-gallery
Published
2024-11-15
Title
Lis Video Gallery <= 0.2.1 - Unauthenticated PHP Object Injection
Slug
lisfinity-core
Published
2025-10-08
Title
Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme < 1.5.0 - Authenticated (Subscriber+) Privilege Escalation
Slug
lisfinity-core
Published
2025-10-14
Title
Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme < 1.5.0 - Unauthenticated Privilege Escalation to Editor
Slug
lisfinity-core
Published
2026-03-05
Title
Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.5.0 - Unauthenticated SQL Injection
Slug
lisl-last-image-slider
Published
2014-08-01
Title
LISL Last Image Slider 1.0 - Shell Upload
Slug
list-all-posts-by-authors-nested-categories-and-titles
Published
2023-11-29
Title
List all posts by Authors, nested Categories and Title < 2.8.3 - CSRF
Slug
list-attachments-shortcode
Published
2025-12-05
Title
List Attachments Shortcode <= 0.4.1a - Authenticated (Author+) Stored Cross-Site Scripting via list-attachments Shortcode
Slug
list-categories
Published
2024-05-29
Title
List categories < 0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
list-category-posts
Published
2024-01-09
Title
List category posts < 0.89.4 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
list-category-posts
Published
2024-03-29
Title
List category posts < 0.89.7 - Contributor+ Stored XSS
Slug
list-category-posts
Published
2024-12-27
Title
List category posts < 0.90.3 - Author+ Stored XSS
Slug
list-category-posts
Published
2025-05-07
Title
List category posts < 0.92.0 - Contributor+ Local File Inclusion
Slug
list-category-posts
Published
2025-10-31
Title
List category posts < 0.93.0 - Authenticated (Contributor+) Information Exposure