WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
live-comment-preview
Published
2014-08-01
Title
Live Comment Preview 2.0.2 - Comment Field Preview XSS
Slug
live-composer-page-builder
Published
2023-01-24
Title
Page Builder: Live Composer < 1.5.23 - Contributor+ Stored XSS via Shortcode
Slug
live-composer-page-builder
Published
2024-01-03
Title
Page Builder: Live Composer < 1.5.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
live-composer-page-builder
Published
2024-01-03
Title
Page Builder: Live Composer < 1.5.29 - Author+ PHP Object Injection
Slug
live-composer-page-builder
Published
2024-04-10
Title
Page Builder: Live Composer < 1.5.36 - Cross-Site Request Forgery
Slug
live-composer-page-builder
Published
2024-04-23
Title
Page Builder: Live Composer < 1.5.39 - Missing Authorization
Slug
live-composer-page-builder
Published
2024-06-19
Title
Page Builder: Live Composer < 1.5.43 - Authenticated (Contributor+) PHP Object Injection
Slug
live-composer-page-builder
Published
2024-06-19
Title
Page Builder: Live Composer < 1.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
live-composer-page-builder
Published
2024-06-18
Title
Page Builder: Live Composer <= 2.1.6 - Author+ Stored XSS
Slug
live-composer-page-builder
Published
2025-12-16
Title
Live Composer – Free WordPress Website Builder < 2.0.3 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
live-composer-page-builder
Published
2025-12-20
Title
Live Composer – Free WordPress Website Builder < 2.0.3 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode
Slug
live-composer-page-builder
Published
2025-12-22
Title
Page Builder: Live Composer <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
live-css-preview
Published
2025-12-04
Title
Live CSS Preview < 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
live-dashboard
Published
2025-01-16
Title
Live Dashboard <= 0.3.3 - Reflected Cross-Site Scripting
Slug
live-flight-radar
Published
2025-01-07
Title
Live Flight Radar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
live-news-lite
Published
2023-09-04
Title
Live News < 1.07 - Settings Update via CSRF
Slug
live-photos
Published
2025-11-10
Title
Live Photos on WordPress <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
live-sales-notifications-for-woocommerce
Published
2025-11-17
Title
Live sales notification for WooCommerce < 2.3.40 - Missing Authorization to Unauthenticated Customer Data Exposure
Slug
live-sales-notifications-for-woocommerce
Published
2026-01-11
Title
Live sales notification for WooCommerce <= 2.3.46 - Missing Authorization
Slug
live-scores-for-sportspress
Published
2021-08-24
Title
Live Scores for SportsPress < 1.9.1 - Reflected Cross-Site Scripting
Slug
live-scores-for-sportspress
Published
2021-08-24
Title
Live Scores for SportsPress < 1.9.1 - Authenticated Local File Inclusion
Slug
live-scores-for-sportspress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
live-scores-for-sportspress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
live-search-xforwc
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
live-shopping-video-streams
Published
2025-12-31
Title
Live Shopping & Shoppable Videos For WooCommerce <= 2.2.0 - Cross-Site Request Forgery