WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
lbg_fullscreen_fullwidth_slider
Published
2026-01-08
Title
Image&Video FullScreen Background <= 1.6.7 - Reflected Cross-Site Scripting
Slug
lbg_radio_player_addon_visual_composer
Published
2025-07-16
Title
HTML5 Radio Player - WPBakery Page Builder Addon < 2.5.2 - Reflected Cross-Site Scripting
Slug
lbg_universal_video_player_addon_visual_composer
Published
2025-07-17
Title
Universal Video Player - Addon for WPBakery Page Builder < 3.2.2.0 - Reflected Cross-Site Scripting
Slug
lbg_vp_youtube_vimeo_addon_visual_composer
Published
2025-07-16
Title
Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Reflected Cross-Site Scripting
Slug
lbg_vp_youtube_vimeo_addon_visual_composer
Published
2025-08-07
Title
Multimedia Playlist Slider Addon for WPBakery Page Builder < 2.2 - Reflected Cross-Site Scripting
Slug
lbg_zoominoutslider
Published
2014-08-01
Title
LBG Zoominoutslider - add_banner.php name Parameter Stored XSS
Slug
lbg_zoominoutslider
Published
2014-08-01
Title
LBG Zoominoutslider - settings_form.php Multiple Parameter Stored XSS
Slug
lbg_zoominoutslider
Published
2014-08-01
Title
LBG Zoominoutslider - add_playlist_record.php Multiple Parameter Stored XSS
Slug
lbg_zoominoutslider
Published
2014-08-01
Title
LBG Zoominoutslider - add_banner.php Unspecified XSS
Slug
lbg_zoominoutslider
Published
2014-08-01
Title
LBG Zoominoutslider - Multiple Script Direct Request Path Disclosure
Slug
lbg_zoominoutslider
Published
2025-09-28
Title
LBG Zoominoutslider < 5.4.5 - Authenticated (Contributor+) SQL Injection
Slug
lbg_zoominoutslider
Published
2026-02-26
Title
Responsive Zoom In/Out Slider WordPress Plugin <= 5.4.5 - Reflected Cross-Site Scripting
Slug
lbstopattack
Published
2022-09-29
Title
LBStopAttack < 1.1.3 - Arbitrary Settings Update via CSRF
Slug
ldap-ad-staff-employee-directory-search
Published
2023-09-08
Title
Staff / Employee Business Directory for Active Directory < 1.2.3 - Improper escaping of LDAP entries
Slug
ldap-ad-staff-employee-directory-search
Published
2023-09-25
Title
Staff / Employee Business Directory for Active Directory < 1.3 - Admin LDAP Credentials Retrieval
Slug
ldap-login-for-intranet-sites
Published
2021-10-18
Title
Active Directory Integration / LDAP Integration < 3.6.95 - Reflected Cross-Site Scripting
Slug
ldap-login-for-intranet-sites
Published
2023-04-19
Title
Active Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data Disclosure
Slug
ldap-login-for-intranet-sites
Published
2023-05-12
Title
Active Directory Integration < 4.1.5 - SQL Injection via CSRF
Slug
ldap-login-for-intranet-sites
Published
2023-06-28
Title
Active Directory Integration / LDAP Integration < 4.1.6 - Sensitive Information Disclosure
Slug
ldap-login-for-intranet-sites
Published
2023-09-25
Title
Active Directory Integration / LDAP Integration < 4.2 - Admin LDAP Passback
Slug
ldap-login-for-intranet-sites
Published
2023-09-25
Title
Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure
Slug
ldap-login-password-and-role-manager
Published
2025-01-07
Title
ldap_login_password_and_role_manager <= 1.0.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ldap-wp-login-integration-with-active-directory
Published
2022-09-05
Title
Ldap WP Login / Active Directory Integration < 3.0.2 - Reflected Cross-Site Scripting
Slug
ldap-wp-login-integration-with-active-directory
Published
2022-09-05
Title
Ldap WP Login / Active Directory Integration < 3.0.2 - Unauthenticated Settings Update to Auth Bypass
Slug
ldd-directory-lite
Published
2024-12-11
Title
LDD Directory Lite <= 3.3 - Reflected Cross-Site Scripting