WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
logo-showcase
Published
2025-09-22
Title
Logo Showcase < 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
logo-showcase-ultimate
Published
2024-03-05
Title
Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid < 1.3.9 - Authenticated(Contributor+) PHP Object Injection
Slug
logo-showcase-ultimate
Published
2024-08-26
Title
Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid < 1.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
logo-showcase-ultimate
Published
2025-04-09
Title
Logo Showcase Ultimate < 1.4.5 - Contributor+ Local File Inclusion
Slug
logo-showcase-with-slick-slider
Published
2021-10-19
Title
Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting
Slug
logo-showcase-with-slick-slider
Published
2022-01-31
Title
Logo Showcase with Slick Slider < 2.0.1 - Arbitrary Media Title/Description/Alt Text/URL Update via CSRF
Slug
logo-showcase-with-slick-slider
Published
2021-10-24
Title
Logo Showcase with Slick Slider < 1.2.5 - Subscriber+ Arbitrary Media Title/Description/Alt Text/URL Update
Slug
logo-showcase-with-slick-slider
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
logo-showcase-with-slick-slider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
logo-showcase-with-slick-slider
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
logo-slider
Published
2022-05-09
Title
Logo Slider <= 1.4.8 - Admin+ SQLi
Slug
logo-slider-wp
Published
2022-12-16
Title
Logo Slider < 3.6.0 - Contributor+ Stored XSS in Shortcode
Slug
logo-slider-wp
Published
2024-05-17
Title
Logo Slider < 4.0.0 - Contributor+ Stored XSS
Slug
logo-slider-wp
Published
2024-09-26
Title
Logo Slider < 4.1.0 - Contributor+ Stored XSS
Slug
logo-slider-wp
Published
2024-11-07
Title
Logo Slider < 4.5.0 - Author+ Stored XSS
Slug
logo-slider-wp
Published
2024-11-07
Title
Logo Slider < 4.5.0 - Contributor+ Stored XSS
Slug
logo-slider-wp
Published
2025-02-03
Title
Logo Slider < 4.6.0 - Contributor+ Stored XSS
Slug
logo-slider-wp
Published
2025-12-12
Title
Logo Slider < 4.9.0 - Contributor+ Stored XSS
Slug
logo-slider-wp
Published
2026-01-10
Title
Logo Slider < 5.5.4 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
logo-slider-wp
Published
2026-03-20
Title
Logo Slider <= 4.9.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'logo-slider' Shortcode
Slug
logo-slider-wp
Published
2026-07-09
Title
Logo Slider < 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lgx_tooltip_position' Parameter
Slug
logs-de-connexion
Published
2024-11-10
Title
Connexion Logs <= 3.0.2 - Admin+ SQL Injection
Slug
logs-de-connexion
Published
2024-11-10
Title
Connexion Logs <= 3.0.2 - Log Deletion via CSRF
Slug
logtivity
Published
2026-05-14
Title
Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity < 3.3.7 - Unauthenticated Information Exposure
Slug
logtivity
Published
2026-05-08
Title
Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity < 3.3.7 - Unauthenticated Information Disclosure via REST API