WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
list-category-posts
Published
2025-12-10
Title
List Category Posts < 0.92.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode
Slug
list-category-posts
Published
2026-04-08
Title
List category posts < 0.95.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'catlist' Shortcode
Slug
list-category-posts
Published
2026-02-26
Title
List category posts < 0.94.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
list-child-pages-shortcode
Published
2025-09-22
Title
List Child Pages Shortcode < 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
list-children
Published
2025-04-30
Title
List Children < 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
list-custom-taxonomy-widget
Published
2024-04-22
Title
List Custom Taxonomy Widget < 4.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
list-last-changes
Published
2025-04-22
Title
List Last Changes < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
list-mixcloud
Published
2025-03-11
Title
List Mixcloud <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
list-one-category-of-posts
Published
2024-12-12
Title
Category of Posts <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
list-pages-at-depth
Published
2025-01-07
Title
List Pages at Depth <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
list-pages-shortcode
Published
2023-02-02
Title
List Pages Shortcode < 1.7.6 - Contributor+ Stored XSS via Shortcode
Slug
list-posts-by-category
Published
2025-03-11
Title
List of Posts from each Category plugin for WordPress <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
list-related-attachments-widget
Published
2025-02-24
Title
List Related Attachments <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
list-site-contributors
Published
2026-01-13
Title
List Site Contributors <= 1.1.8 - Reflected Cross-Site Scripting via alpha
Slug
list-sub-pages
Published
2025-08-28
Title
List Subpages < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
Slug
list-urls
Published
2025-02-21
Title
List Urls <= 0.2 - Reflected Cross-Site Scripting
Slug
list-view-google-calendar
Published
2026-04-14
Title
List View Google Calendar < 7.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Event Description
Slug
listamester
Published
2025-01-23
Title
Listamester < 2.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
listamester
Published
2025-03-27
Title
Listamester < 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
listamester
Published
2025-05-07
Title
Listamester < 2.3.7 - Cross-Site Request Forgery
Slug
listapp-mobile-manager
Published
2024-12-11
Title
ListApp Mobile Manager <= 1.7.7 - Missing Authorization to Privilege Escalation
Slug
listar-directory-listing
Published
2025-12-05
Title
Listar – Directory Listing & Classifieds WordPress Plugin <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Slug
listar-directory-listing
Published
2025-12-05
Title
Listar – Directory Listing & Classifieds WordPress Plugin <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Listing Update
Slug
listdom
Published
2024-12-03
Title
Listdom – Business Directory and Classified Ads Listings WordPress Plugin < 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Parameter
Slug
listdom
Published
2025-04-16
Title
Listdom < 4.1.0 - Open Redirect