WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
listings-for-buildium
Published
2025-04-11
Title
Listings for Buildium < 0.1.6 - Stored XSS via CSRF
Slug
listivo-core
Published
2026-01-21
Title
Listivo Core < 2.3.78 - Unauthenticated Local File Inclusion
Slug
listly
Published
2025-07-17
Title
Listly: Listicles For WordPress <= 2.7 - Unauthenticated Arbitrary Transient Deletion
Slug
listmanager
Published
2014-09-27
Title
Lyris List Manager 8.95a - Cross-Site Scripting (XSS)
Slug
listplus
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
listsearch
Published
2026-02-10
Title
BuddyHolis ListSearch <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'placeholder' Shortcode Attribute
Slug
lite-wp-logger
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
litespeed-cache
Published
2020-12-26
Title
LiteSpeed Cache < 3.6.1 - Authenticated Stored Cross-Site Scripting
Slug
litespeed-cache
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site Scripting
Slug
litespeed-cache
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS
Slug
litespeed-cache
Published
2023-03-22
Title
LiteSpeed Cache <= 5.3 - CSRF
Slug
litespeed-cache
Published
2023-10-23
Title
LiteSpeed Cache < 5.7 - Contributor+ Stored XSS
Slug
litespeed-cache
Published
2024-02-27
Title
LiteSpeed Cache < 5.7.0.1 - Unauthenticated CDN Status Update
Slug
litespeed-cache
Published
2024-02-27
Title
LiteSpeed Cache < 5.7.0.1 - Unauthenticated Stored XSS
Slug
litespeed-cache
Published
2024-07-23
Title
LiteSpeed Cache < 6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
litespeed-cache
Published
2024-08-21
Title
LiteSpeed Cache < 6.4 - Unauthenticated Privilege Escalation
Slug
litespeed-cache
Published
2024-09-05
Title
LiteSpeed Cache < 6.5.0.1 - Unauthenticated Sensitive Information Exposure via Log Files
Slug
litespeed-cache
Published
2024-09-24
Title
litespeed cache < 6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
litespeed-cache
Published
2024-09-30
Title
LiteSpeed Cache < 6.5.1 - Unauthenticated Stored Cross-Site Scripting
Slug
litespeed-cache
Published
2024-09-30
Title
LiteSpeed Cache < 6.5.1 - Author+ Path Traversal
Slug
litespeed-cache
Published
2024-09-30
Title
LiteSpeed Cache < 6.5.1 - Contributor+ Stored XSS
Slug
litespeed-cache
Published
2024-10-29
Title
LiteSpeed Cache < 6.5.2 - Unauthenticated Privilege Escalation
Slug
litespeed-cache
Published
2025-05-07
Title
LiteSpeed Cache < 7.1 - Editor+ Server-Side Request Forgery
Slug
litespeed-cache
Published
2025-10-28
Title
LiteSpeed Cache < 7.6 - Reflected XSS
Slug
litespeed-cache
Published
2024-12-20
Title
LiteSpeed Cache < 6.5.3 - Contributor+ Stored XSS