WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
leads-for-amo-crm
Published
2025-09-10
Title
The integration of the AMO.CRM <= 1.0.1 - Cross-Site Request Forgery
Slug
leadsquared-suite
Published
2023-10-03
Title
LeadSquared Suite <= 0.7.4 - CSRF
Slug
leadsquared-suite
Published
2023-10-13
Title
LeadSquared Suite <= 0.7.4 - Admin+ Stored XSS
Slug
leadster-marketing-conversacional
Published
2023-09-04
Title
Leadster < 1.1.3 - Settings Update via CSRF
Slug
leadster-marketing-conversacional
Published
2023-11-16
Title
Leadster < 1.1.3 - Cross-Site Request Forgery via leadster_script_code_action
Slug
leaflet
Published
2012-05-15
Title
Leaflet <= 0.0.1 - Cross Site Scripting
Slug
leaflet-map
Published
2021-07-01
Title
Leaflet Map < 3.0.0 - Contributor+ Stored XSS
Slug
leaflet-map
Published
2021-07-01
Title
Leaflet Map < 3.0.0 - Arbitrary Settings Update via CSRF Leading to Stored XSS
Slug
leaflet-map
Published
2023-09-20
Title
Leaflet Map < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
leaflet-maps-marker
Published
2014-08-01
Title
Leaflet Maps Marker 3.5.2 - Two SQL Injection Vulnerabilities
Slug
leaflet-maps-marker
Published
2022-08-08
Title
Leaflet Maps Marker < 3.12.5 - Admin+ SQLi
Slug
leaflet-maps-marker
Published
2023-01-12
Title
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.12.7 - Contributor+ Stored XSS via Shortcode
Slug
leaflet-maps-marker
Published
2024-04-08
Title
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.12.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
leaflet-maps-marker
Published
2024-07-19
Title
Leaflet Maps Marker < 3.12.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
leaflet-maps-marker-pro
Published
2014-08-01
Title
Leaflet Maps Marker Pro - SQLI, XSS, Shell Upload, file delete
Slug
league-of-legends-rotation
Published
2025-07-29
Title
WP LOL Rotation <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
league-of-legends-shortcodes
Published
2024-10-24
Title
League of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
league-of-legends-shortcodes
Published
2024-10-24
Title
League of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
league-table-lite
Published
2023-11-23
Title
League Table < 1.14 - Tables Cloning/Update/Deletion via CSRF
Slug
leaguemanager
Published
2014-08-01
Title
LeagueManager <= 3.7 - wp-admin/admin.php Multiple Parameter XSS
Slug
leaguemanager
Published
2014-08-01
Title
LeagueManager 3.8 - SQL Injection
Slug
leaguemanager
Published
2015-06-02
Title
LeagueManager <= 3.9.11 - Unauthenticated SQL Injection
Slug
leaky-paywall
Published
2021-10-18
Title
Leaky Paywall < 4.16.7 - Admin+ Stored Cross-Site Scripting
Slug
leaky-paywall
Published
2024-04-25
Title
Leaky Paywall < 4.20.9 - Missing Authorization to Price Manipulation
Slug
leaky-paywall
Published
2024-07-06
Title
Leaky Paywall < 4.21.3 - Cross-Site Request Forgery