WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
live-composer-page-builder
Published
2024-04-23
Title
Page Builder: Live Composer < 1.5.39 - Missing Authorization
Slug
live-composer-page-builder
Published
2024-06-19
Title
Page Builder: Live Composer < 1.5.43 - Authenticated (Contributor+) PHP Object Injection
Slug
live-composer-page-builder
Published
2024-06-19
Title
Page Builder: Live Composer < 1.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
live-composer-page-builder
Published
2024-06-18
Title
Page Builder: Live Composer <= 2.0.7 - Author+ Stored XSS
Slug
live-composer-page-builder
Published
2025-12-16
Title
Live Composer – Free WordPress Website Builder < 2.0.3 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
live-composer-page-builder
Published
2025-12-20
Title
Live Composer – Free WordPress Website Builder < 2.0.3 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode
Slug
live-composer-page-builder
Published
2025-12-22
Title
Page Builder: Live Composer <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
live-css-preview
Published
2025-12-04
Title
Live CSS Preview <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
live-dashboard
Published
2025-01-16
Title
Live Dashboard <= 0.3.3 - Reflected Cross-Site Scripting
Slug
live-flight-radar
Published
2025-01-07
Title
Live Flight Radar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
live-news-lite
Published
2023-09-04
Title
Live News < 1.07 - Settings Update via CSRF
Slug
live-photos
Published
2025-11-10
Title
Live Photos on WordPress <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
live-sales-notifications-for-woocommerce
Published
2025-11-17
Title
Live sales notification for WooCommerce < 2.3.40 - Missing Authorization to Unauthenticated Customer Data Exposure
Slug
live-scores-for-sportspress
Published
2021-08-24
Title
Live Scores for SportsPress < 1.9.1 - Reflected Cross-Site Scripting
Slug
live-scores-for-sportspress
Published
2021-08-24
Title
Live Scores for SportsPress < 1.9.1 - Authenticated Local File Inclusion
Slug
live-scores-for-sportspress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
live-scores-for-sportspress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
live-search-xforwc
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
live-shopping-video-streams
Published
2025-12-31
Title
Live Shopping & Shoppable Videos For WooCommerce <= 2.2.0 - Cross-Site Request Forgery
Slug
live-shopping-video-streams
Published
2025-12-31
Title
Live Shopping & Shoppable Videos For WooCommerce <= 2.2.0 - Missing Authorization
Slug
live-sports-streamthunder
Published
2025-06-19
Title
Live Sports Streamthunder <= 2.1 - Cross-Site Request Forgery
Slug
live-stock-prices-for-wordpress
Published
2025-01-06
Title
Financial Stocks & Crypto Market Data Plugin <= 1.10.3 - Reflected Cross-Site Scripting
Slug
live-stream-badger
Published
2025-07-18
Title
Live Stream Badger <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
live-support-tickets
Published
2024-10-14
Title
Contact Forms, Live Support, CRM, Video Messages < 1.11.1 - Unauthenticated Information Disclosure
Slug
live-tv
Published
2025-03-19
Title
LIVE TV <= 1.2 - Reflected Cross-Site Scripting