WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
linked-variation
Published
2025-04-22
Title
Advanced Linked Variations for Woocommerce < 1.0.4 - Missing Authorization
Slug
linked-variation-for-woocommerce
Published
2024-10-14
Title
Linked Variation for WooCommerce < 2.0.0 - CSRF
Slug
linkedin-auto-publish
Published
2025-12-12
Title
WP to LinkedIn Auto Publish < 1.9.9 - Reflected Cross-Site Scripting via PostMessage
Slug
linkedin-lite
Published
2025-03-17
Title
LinkedIn Lite <= 1.0 - Unauthenticated Local File Inclusion
Slug
linkedin-login
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
linkedin-resume
Published
2025-11-03
Title
LinkedIn Resume <= 2.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
linkedin-sc
Published
2026-01-13
Title
LinkedIn SC <= 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Page
Slug
linkedinclude
Published
2025-09-22
Title
LinkedInclude <= 3.0.4 - Cross-Site Request Forgery
Slug
linker
Published
2023-10-31
Title
Linker < 1.2.2 - Contributor+ Stored XSS
Slug
linkid
Published
2025-01-08
Title
linkID <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Slug
linkify-text
Published
2024-08-08
Title
Linkify Text <= 1.9.1 - Unauthenticated Full Path Disclosure
Slug
linklaunder-seo-plugin
Published
2024-11-23
Title
LinkLaunder SEO <= 0.92.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
linkmyposts
Published
2025-02-26
Title
LinkMyPosts <= 1.0 - Reflected XSS
Slug
linkpizza-manager
Published
2026-02-21
Title
linkPizza-Manager < 5.6.0 - Missing Authorization
Slug
linkpreview
Published
2025-02-24
Title
Phee's LinkPreview <= 1.6.7 - Cross-Site Request Forgery
Slug
links-in-captions
Published
2025-02-03
Title
Links in Captions <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
links-shortcode
Published
2025-09-27
Title
Links shortcode <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
linksy-search-and-replace
Published
2026-03-20
Title
Linksy Search and Replace <= 1.0.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Database Update via linksy_search_and_replace_item_details
Slug
linkworth-wp-plugin
Published
2022-08-01
Title
LinkWorth Plugin < 3.3.4 - Arbitrary Setting Update via CSRF
Slug
linkz-ai
Published
2024-10-10
Title
Linkz.ai < 1.2.0 - Subscriber+ Plugin Settings Update
Slug
linkz-ai
Published
2024-10-10
Title
Linkz.ai < 1.2.0 - Unauthenticated Plugin Settings Update
Slug
linux-promotional-plugin
Published
2025-08-15
Title
Linux Promotional Plugin <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
liquid-blocks
Published
2024-11-08
Title
LIQUID BLOCKS < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
liquid-chatgpt
Published
2025-11-24
Title
AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read
Slug
liquid-speech-balloon
Published
2023-04-19
Title
Liquid Speech Balloon < 1.2 - Settings Update via CSRF