WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
local-shipping-labels-for-woocommerce
Published
2025-01-16
Title
Local Shipping Labels for WooCommerce <= 1.0.0 - Reflected Cross-Site Scripting
Slug
local-sync
Published
2025-01-24
Title
WP Duplicate – WordPress Migration Plugin < 1.1.7 - Missing Authorization
Slug
local-sync
Published
2026-02-05
Title
WP Duplicate < 1.1.9 - Subscriber+ Arbitrary File Upload
Slug
local-syndication
Published
2025-11-17
Title
Local Syndication <= 1.5a - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode
Slug
localgrid
Published
2025-01-16
Title
LocalGrid <= 1.0.1 - Reflected Cross-Site Scripting
Slug
localize-my-post
Published
2018-09-19
Title
Localize My Post 1.0 - Unauthenticated Local File Inclusion (LFI)
Slug
localize-remote-images
Published
2023-08-29
Title
Localize Remote Images <= 1.0.9 - Settings Update via CSRF
Slug
localseomap-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
locateandfilter
Published
2024-09-30
Title
LocateAndFilter < 1.6.16 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
locateandfilter
Published
2025-05-07
Title
LocateAndFilter < 1.6.17 - Missing Authorization
Slug
location-click-map
Published
2024-11-08
Title
Location Click Map <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
location-piker
Published
2025-01-16
Title
Google Map With Fancybox <= 2.1.0 - Reflected Cross-Site Scripting
Slug
location-weather
Published
2023-01-18
Title
Location Weather < 1.3.4 - Contributor+ Stored XSS
Slug
locations
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Slug
locations
Published
2021-07-05
Title
Locations < 4.0 - Cross-Site Request Forgery
Slug
locations
Published
2023-10-02
Title
Locations <= 4.0 - Contributor+ Stored XSS
Slug
locations-and-areas
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
locations-and-areas
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
locatoraid
Published
2023-02-14
Title
Locatoraid Store Locator < 3.9.12 - CSRF
Slug
locatoraid
Published
2023-04-17
Title
Locatoraid Store Locator < 3.9.15 - Contributor+ Stored Cross-Site Scripting
Slug
locatoraid
Published
2023-05-11
Title
Locatoraid Store Locator < 3.9.19 - Subscriber+ Stored XSS
Slug
locatoraid
Published
2023-08-28
Title
Locatoraid Store Locator < 3.9.24 - Reflected XSS
Slug
locatoraid
Published
2024-03-25
Title
Locatoraid Store Locator < 3.9.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
locatoraid
Published
2024-10-15
Title
Locatoraid Store Locator < 3.9.48 - Reflected Cross-Site Scripting
Slug
locatoraid
Published
2025-01-03
Title
Locatoraid Store Locator < 3.9.51 - Unauthenticated PHP Object Injection