WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
loginpress
Published
2018-11-29
Title
LoginPress <= 1.1.13 - Unauthorized Blind SQL Injection
Slug
loginpress
Published
2018-11-29
Title
LoginPress <= 1.1.15 - Authenticated Blind SQL Injection
Slug
loginpress
Published
2022-02-14
Title
LoginPress < 1.5.12 - Reflected Cross-Site Scripting
Slug
loginpress
Published
2022-11-07
Title
LoginPress < 1.6.3 - Unauthenticated Settings Update
Slug
loginpress
Published
2025-03-13
Title
LoginPress < 4.0.0 - Arbitrary Options Update via CSRF
Slug
loginpress-pro
Published
2024-04-17
Title
LoginPress Pro < 3.0.0 - Unauthenticated License Activation/Deactivation
Slug
loginpress-pro
Published
2024-04-17
Title
LoginPress Pro < 3.0.0 - Captcha Bypass
Slug
loginpress-pro
Published
2025-07-17
Title
LoginPress Pro < 5.0.2 - Authentication Bypass via WordPress.com OAuth provider
Slug
loginwp-pro
Published
2025-07-07
Title
LoginWP - Pro < 4.0.8.6 - Missing Authorization
Slug
loginwp-pro
Published
2025-07-22
Title
LoginWP - Pro < 4.0.8.6 - Missing Authorization to Unauthenticated Settings Update
Slug
logo-carousel-free
Published
2021-11-22
Title
Logo Carousel < 3.4.2 - Contributor+ Stored Cross-Site Scripting
Slug
logo-carousel-free
Published
2021-11-22
Title
Logo Carousel < 3.4.2 - Unauthorised Private Post Access
Slug
logo-carousel-slider
Published
2025-04-16
Title
Logo Carousel Slider <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
logo-manager-for-enamad
Published
2024-06-04
Title
Logo Manager For Enamad < 0.7.1 - Stored XSS via CSRF
Slug
logo-manager-for-enamad
Published
2024-08-27
Title
Logo Manager For Enamad < 0.7.2 - Admin+ Stored XSS via Widget
Slug
logo-scheduler-great-for-holidays-events-and-more
Published
2023-08-18
Title
Logo Scheduler < 1.2.2 - Admin+ Stored XSS
Slug
logo-showcase
Published
2025-05-07
Title
Logo Showcase < 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
logo-showcase
Published
2025-09-22
Title
Logo Showcase <= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
logo-showcase-ultimate
Published
2024-03-05
Title
Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid < 1.3.9 - Authenticated(Contributor+) PHP Object Injection
Slug
logo-showcase-ultimate
Published
2024-08-26
Title
Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid < 1.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
logo-showcase-ultimate
Published
2025-04-09
Title
Logo Showcase Ultimate < 1.4.5 - Contributor+ Local File Inclusion
Slug
logo-showcase-with-slick-slider
Published
2021-10-19
Title
Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting
Slug
logo-showcase-with-slick-slider
Published
2022-01-31
Title
Logo Showcase with Slick Slider < 2.0.1 - Arbitrary Media Title/Description/Alt Text/URL Update via CSRF
Slug
logo-showcase-with-slick-slider
Published
2021-10-24
Title
Logo Showcase with Slick Slider < 1.2.5 - Subscriber+ Arbitrary Media Title/Description/Alt Text/URL Update
Slug
logo-showcase-with-slick-slider
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius