WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
live-chat-facebook-fanpage
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
live-chat-support-by-social-intents
Published
2025-04-04
Title
Social Intents <= 1.6.19 - Admin+ Stored XSS
Slug
live-comment-preview
Published
2014-08-01
Title
Live Comment Preview 2.0.2 - Comment Field Preview XSS
Slug
live-composer-page-builder
Published
2023-01-24
Title
Page Builder: Live Composer < 1.5.23 - Contributor+ Stored XSS via Shortcode
Slug
live-composer-page-builder
Published
2024-01-03
Title
Page Builder: Live Composer < 1.5.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
live-composer-page-builder
Published
2024-01-03
Title
Page Builder: Live Composer < 1.5.29 - Author+ PHP Object Injection
Slug
live-composer-page-builder
Published
2024-04-10
Title
Page Builder: Live Composer < 1.5.36 - Cross-Site Request Forgery
Slug
live-composer-page-builder
Published
2024-04-23
Title
Page Builder: Live Composer < 1.5.39 - Missing Authorization
Slug
live-composer-page-builder
Published
2024-06-19
Title
Page Builder: Live Composer < 1.5.43 - Authenticated (Contributor+) PHP Object Injection
Slug
live-composer-page-builder
Published
2024-06-19
Title
Page Builder: Live Composer < 1.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
live-composer-page-builder
Published
2024-06-18
Title
Page Builder: Live Composer <= 2.1.24 - Author+ Stored XSS
Slug
live-composer-page-builder
Published
2025-12-16
Title
Live Composer – Free WordPress Website Builder < 2.0.3 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
live-composer-page-builder
Published
2025-12-20
Title
Live Composer – Free WordPress Website Builder < 2.0.3 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode
Slug
live-composer-page-builder
Published
2025-12-22
Title
Page Builder: Live Composer <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
live-composer-page-builder
Published
2026-08-31
Title
Live Composer < 2.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_custom_field' Shortcode
Slug
live-composer-page-builder
Published
2026-08-31
Title
Live Composer < 2.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_id' Shortcode Attribute
Slug
live-composer-page-builder
Published
2026-08-31
Title
Live Composer < 2.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc_module_testimonials_output Shortcode
Slug
live-composer-page-builder
Published
2026-08-31
Title
Live Composer < 2.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via dslc_module_projects_output Shortcode
Slug
live-composer-page-builder
Published
2026-09-07
Title
Live Composer < 2.1.19 - Authenticated (Contributor+) PHP Object Injection via Shortcode
Slug
live-composer-page-builder
Published
2026-09-21
Title
Live Composer < 2.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dslc_module_downloads_output' Shortcode Content
Slug
live-copy-paste
Published
2026-06-26
Title
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator < 1.5.9 - Missing Authorization
Slug
live-copy-paste
Published
2026-08-08
Title
BdThemes Multiple Plugins - XSS via 'display_id' from Sigmative API
Slug
live-copy-paste
Published
2026-09-23
Title
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator < 1.5.11 - Authenticated (Contributor+) SQL Injection
Slug
live-css-preview
Published
2025-12-04
Title
Live CSS Preview < 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
live-dashboard
Published
2025-01-16
Title
Live Dashboard <= 0.3.3 - Reflected Cross-Site Scripting