WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
lottiefiles
Published
2026-01-13
Title
LottieFiles – Lottie block for Gutenberg < 3.1.0 - Unauthenticated Sensitive Information Exposure
Slug
lottiefiles
Published
2026-02-05
Title
LottieFiles < 3.1.0 - Missing Authorization
Slug
lottier-elementor
Published
2025-12-11
Title
Lottier for Elementor <= 1.0.9 - Missing Authorization
Slug
lottier-gutenberg
Published
2025-12-11
Title
Lottier <= 1.1.1 - Missing Authorization
Slug
lottier-wpbakery
Published
2025-12-11
Title
Lottier for WPBakery <= 1.1.7 - Missing Authorization
Slug
lpagery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
lpagery
Published
2026-01-07
Title
Bulk Landing Page Creator for WordPress LPagery < 2.4.10 - Missing Authorization
Slug
ls-gmap-route
Published
2025-12-11
Title
LS Google Map Router <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
lsd-google-maps-embedder
Published
2025-01-16
Title
LSD Google Maps Embedder <= 1.1 - Cross-Site Request Forgery Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
lt-unleashed
Published
2025-12-11
Title
LT Unleashed <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion via 'template' Parameter
Slug
ltl-freight-quotes-abf-freight-edition
Published
2025-02-18
Title
LTL Freight Quotes – ABF Freight Edition < 3.3.8 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-day-ross-edition
Published
2025-06-06
Title
LTL Freight Quotes – Freightview Edition <= 1.0.11, LTL Freight Quotes – Daylight Edition <=2.2.6 and LTL Freight Quotes – Day & Ross Edition <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter
Slug
ltl-freight-quotes-day-ross-edition
Published
2025-09-03
Title
LTL Freight Quotes – Day & Ross Edition < 2.1.12 - Authenticated (Administrator+) PHP Object Injection
Slug
ltl-freight-quotes-daylight-edition
Published
2025-06-06
Title
LTL Freight Quotes – Freightview Edition <= 1.0.11, LTL Freight Quotes – Daylight Edition <=2.2.6 and LTL Freight Quotes – Day & Ross Edition <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter
Slug
ltl-freight-quotes-daylight-edition
Published
2025-09-03
Title
LTL Freight Quotes – Daylight Edition < 2.2.8 - Authenticated (Administrator+) PHP Object Injection
Slug
ltl-freight-quotes-estes-edition
Published
2025-02-14
Title
LTL Freight Quotes – Estes Edition < 3.3.8 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-fedex-freight-edition
Published
2025-02-11
Title
LTL Freight Quotes – For Customers of FedEx Freight < 3.4.2 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-freightquote-edition
Published
2025-02-12
Title
LTL Freight Quotes – FreightQuote Edition < 2.3.12 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-freightquote-edition
Published
2025-02-12
Title
LTL Freight Quotes – FreightQuote Edition < 2.3.12 - Missing Authorization
Slug
ltl-freight-quotes-freightview-edition
Published
2025-06-06
Title
LTL Freight Quotes – Freightview Edition <= 1.0.11, LTL Freight Quotes – Daylight Edition <=2.2.6 and LTL Freight Quotes – Day & Ross Edition <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter
Slug
ltl-freight-quotes-globaltranz-edition
Published
2025-02-19
Title
LTL Freight Quotes – GlobalTranz Edition < 2.3.13 - Missing Authorization to Unauthenticated Settings Update
Slug
ltl-freight-quotes-globaltranz-edition
Published
2025-02-19
Title
LTL Freight Quotes – GlobalTranz Edition < 2.3.12 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-odfl-edition
Published
2025-02-18
Title
LTL Freight Quotes – Old Dominion Edition < 4.2.11 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-purolator-freight-edition
Published
2025-02-21
Title
LTL Freight Quotes – Purolator Edition < 2.2.4 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-rl-edition
Published
2025-02-18
Title
LTL Freight Quotes – R+L Carriers Edition < 3.3.5 - Unauthenticated SQL Injection