WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
luckywp-scripts-control
Published
2023-11-14
Title
LuckyWP Scripts Control < 1.2.2 - Missing Authorization
Slug
luckywp-table-of-contents
Published
2024-05-21
Title
LuckyWP Table of Contents < 2.1.6 - Reflected Cross-Site Scripting
Slug
luckywp-table-of-contents
Published
2024-05-21
Title
LuckyWP Table of Contents < 2.1.5 - Admin+ Stored XSS
Slug
luckywp-table-of-contents
Published
2024-05-21
Title
LuckyWP Table of Contents < 2.1.5 - Contributor+ Stored XSS
Slug
luckywp-table-of-contents
Published
2024-05-24
Title
LuckyWP Table of Contents < 2.1.6 - Admin+ Stored XSS
Slug
luckywp-table-of-contents
Published
2024-11-21
Title
LuckyWP Table of Contents < 2.1.7 - Admin+ Stored XSS
Slug
luckywp-table-of-contents
Published
2025-04-02
Title
LuckyWP Table of Contents < 2.1.11 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
lumise
Published
2026-03-20
Title
Lumise Product Designer < 2.0.9 - Unauthenticated SQL Injection
Slug
lumise
Published
2026-07-22
Title
Product Designer for WooCommerce WordPress | Lumise < 2.1.2 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload
Slug
lunar-sell-photos-online
Published
2025-03-11
Title
Lunar <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
lupsonline-link-netwerk
Published
2025-05-16
Title
SEO Flow by LupsOnline < 3.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
lupsonline-link-netwerk
Published
2026-02-03
Title
SEO Flow by LupsOnline < 3.0.0 - Unauthenticated Arbitrary Post/Category Modification
Slug
lupsonline-link-netwerk
Published
2026-09-03
Title
SEO Flow by LupsOnline 3.0.0 - 3.0.2 - Unauthenticated Privilege Escalation via API Key Authentication
Slug
luzuk-slider
Published
2024-11-08
Title
Luzuk Slider <= 0.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
luzuk-team
Published
2024-11-08
Title
Luzuk Team <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
luzuk-testimonials
Published
2024-11-08
Title
Luzuk Testimonials <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
lw-all-in-one
Published
2020-10-12
Title
LocalWeb All In One plugin < 1.6.5 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
lws-affiliation
Published
2024-08-26
Title
LWS Affiliation < 2.3.5 - Missing Authorization
Slug
lws-affiliation
Published
2025-09-22
Title
LWS Affiliation <= 2.3.6 - Cross-Site Request Forgery
Slug
lws-cleaner
Published
2023-07-11
Title
LWS Cleaner < 2.3.1 - Cross-Site Request Forgery
Slug
lws-cleaner
Published
2025-09-11
Title
LWS Cleaner < 2.4.2 - Admin+ Arbitrary File Deletion
Slug
lws-hide-login
Published
2023-05-23
Title
LWS Hide Login < 2.1.7 - Plugin Settings Page Creation via CSRF
Slug
lws-hide-login
Published
2023-11-16
Title
LWS Hide Login < 2.1.9 - Protection Mechanism Bypass
Slug
lws-optimize
Published
2024-03-29
Title
LWS Optimize < 2.0 - Cross-Site Request Forgery
Slug
lws-optimize
Published
2026-06-12
Title
WS Optimize – All-in-One Speed Booster & Cache Tools < 3.3.20 - Authenticated (Editor+) Arbitrary File Read