WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
logo-slider
Published
2022-05-09
Title
Logo Slider <= 1.4.8 - Admin+ SQLi
Slug
logo-slider-wp
Published
2022-12-16
Title
Logo Slider < 3.6.0 - Contributor+ Stored XSS in Shortcode
Slug
logo-slider-wp
Published
2024-05-17
Title
Logo Slider < 4.0.0 - Contributor+ Stored XSS
Slug
logo-slider-wp
Published
2024-09-26
Title
Logo Slider < 4.1.0 - Contributor+ Stored XSS
Slug
logo-slider-wp
Published
2024-11-07
Title
Logo Slider < 4.5.0 - Author+ Stored XSS
Slug
logo-slider-wp
Published
2024-11-07
Title
Logo Slider < 4.5.0 - Contributor+ Stored XSS
Slug
logo-slider-wp
Published
2025-02-03
Title
Logo Slider < 4.6.0 - Contributor+ Stored XSS
Slug
logo-slider-wp
Published
2025-12-12
Title
Logo Slider < 4.9.0 - Contributor+ Stored XSS
Slug
logo-slider-wp
Published
2026-01-10
Title
Logo Slider <= 4.9.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
logo-slider-wp
Published
2026-03-20
Title
Logo Slider <= 4.9.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'logo-slider' Shortcode
Slug
logs-de-connexion
Published
2024-11-10
Title
Connexion Logs <= 3.0.2 - Admin+ SQL Injection
Slug
logs-de-connexion
Published
2024-11-10
Title
Connexion Logs <= 3.0.2 - Log Deletion via CSRF
Slug
logtivity
Published
2026-05-14
Title
Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity < 3.3.7 - Unauthenticated Information Exposure
Slug
logtivity
Published
2026-05-08
Title
Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity < 3.3.7 - Unauthenticated Information Disclosure via REST API
Slug
logwpmail
Published
2022-05-18
Title
Log WP_Mail <= 0.1 - Email Logs Publicly Accessible
Slug
loi-hamon
Published
2025-02-24
Title
Woocommerce – Loi Hamon <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
lordicon-interactive-icons
Published
2024-03-28
Title
Lordicon Animated Icons <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lottiefiles
Published
2026-01-13
Title
LottieFiles – Lottie block for Gutenberg < 3.1.0 - Unauthenticated Sensitive Information Exposure
Slug
lottiefiles
Published
2026-02-05
Title
LottieFiles < 3.1.0 - Missing Authorization
Slug
lottier-elementor
Published
2025-12-11
Title
Lottier for Elementor <= 1.0.9 - Missing Authorization
Slug
lottier-gutenberg
Published
2025-12-11
Title
Lottier <= 1.1.1 - Missing Authorization
Slug
lottier-wpbakery
Published
2025-12-11
Title
Lottier for WPBakery <= 1.1.7 - Missing Authorization
Slug
lpagery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
lpagery
Published
2026-01-07
Title
Bulk Landing Page Creator for WordPress LPagery < 2.4.10 - Missing Authorization
Slug
ls-gmap-route
Published
2025-12-11
Title
LS Google Map Router <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes