WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ltl-freight-quotes-saia-edition
Published
2025-02-18
Title
LTL Freight Quotes – SAIA Edition < 2.2.11 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-sefl-edition
Published
2025-02-18
Title
LTL Freight Quotes – SEFL Edition < 3.2.5 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-tql-edition
Published
2025-09-03
Title
LTL Freight Quotes - TQL Edition < 1.2.7 - Authenticated (Administrator+) PHP Object Injection
Slug
ltl-freight-quotes-unishippers-edition
Published
2025-02-11
Title
LTL Freight Quotes – Unishippers Edition < 2.5.9 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-unishippers-edition
Published
2025-02-12
Title
LTL Freight Quotes – Unishippers Edition < 2.5.9 - Reflected Cross-Site Scripting
Slug
ltl-freight-quotes-unishippers-edition
Published
2025-02-12
Title
LTL Freight Quotes – Unishippers Edition < 2.5.9 - Missing Authorization
Slug
ltl-freight-quotes-ups-edition
Published
2025-02-18
Title
LTL Freight Quotes – TForce Edition < 3.6.5 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-worldwide-express-edition
Published
2025-01-18
Title
LTL Freight Quotes – Worldwide Express Edition < 5.0.21 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-worldwide-express-edition
Published
2025-02-11
Title
LTL Freight Quotes - Worldwide Express Edition < 5.0.21 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-worldwide-express-edition
Published
2025-02-12
Title
LTL Freight Quotes – Worldwide Express Edition < 5.0.22 - Reflected Cross-Site Scripting
Slug
ltl-freight-quotes-worldwide-express-edition
Published
2025-02-12
Title
LTL Freight Quotes – Worldwide Express Edition < 5.0.21 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Slug
ltl-freight-quotes-xpo-edition
Published
2025-02-11
Title
LTL Freight Quotes – XPO Edition < 4.3.8 - Unauthenticated SQL Injection
Slug
lu-radioplayer
Published
2024-11-12
Title
LUNA RADIO PLAYER < 6.24.11.07 - Unauthenticated Arbitrary File Read
Slug
lu-radioplayer
Published
2024-11-15
Title
LUNA RADIO PLAYER < 6.24.11.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
lucas-string-replace
Published
2024-09-12
Title
Lucas String Replace <= 2.0.5 - Reflected Cross-Site Scripting
Slug
lucidlms
Published
2025-01-07
Title
LucidLMS <= 1.0.5 - Reflected Cross-Site Scripting
Slug
lucky-draw
Published
2025-12-12
Title
Lucky Draw Contests <= 4.2 - Cross-Site Request Forgery to Plugin Settings Update
Slug
luckywp-scripts-control
Published
2023-08-28
Title
LuckyWP Scripts Control < 1.2.2 - CSRF via multiple AJAX actions
Slug
luckywp-scripts-control
Published
2023-11-14
Title
LuckyWP Scripts Control < 1.2.2 - Missing Authorization
Slug
luckywp-table-of-contents
Published
2024-05-21
Title
LuckyWP Table of Contents < 2.1.6 - Reflected Cross-Site Scripting
Slug
luckywp-table-of-contents
Published
2024-05-21
Title
LuckyWP Table of Contents < 2.1.5 - Admin+ Stored XSS
Slug
luckywp-table-of-contents
Published
2024-05-21
Title
LuckyWP Table of Contents < 2.1.5 - Contributor+ Stored XSS
Slug
luckywp-table-of-contents
Published
2024-05-24
Title
LuckyWP Table of Contents < 2.1.6 - Admin+ Stored XSS
Slug
luckywp-table-of-contents
Published
2024-11-21
Title
LuckyWP Table of Contents < 2.1.7 - Admin+ Stored XSS
Slug
luckywp-table-of-contents
Published
2025-04-02
Title
LuckyWP Table of Contents < 2.1.11 - Cross-Site Request Forgery to Reflected Cross-Site Scripting