WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
newspack-blocks
Published
2024-06-28
Title
Newspack Blocks < 3.0.9 - Missing Authorization
Slug
newspack-content-converter
Published
2024-07-01
Title
Newspack Content Converter < 1.0.0 - Missing Authorization
Slug
newspack-newsletters
Published
2024-06-21
Title
Newspack Newsletters < 2.13.3 - Cross-Site Request Forgery
Slug
newspack-newsletters
Published
2024-07-01
Title
Newspack Newsletters < 2.13.3 - Missing Authorization
Slug
newspack-newsletters
Published
2025-06-05
Title
Newspack Newsletters < 3.14.0 - Open Redirect
Slug
newspack-popups
Published
2024-07-01
Title
Newspack Campaigns < 2.31.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newsplugin
Published
2021-07-21
Title
NewsPlugin < 1.1.0 - CSRF to Stored Cross-Site Scripting
Slug
newstatpress
Published
2015-05-25
Title
NewStatPress 0.9.8 - XSS & SQL Injection
Slug
newstatpress
Published
2015-06-30
Title
NewStatPress <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
newstatpress
Published
2015-07-07
Title
NewStatPress < 1.0.6 - SQL Injection
Slug
newstatpress
Published
2015-07-07
Title
NewStatPress < 1.0.6 - Reflected Cross-Site Scripting (XSS)
Slug
newstatpress
Published
2017-03-01
Title
NewStatPress <= 1.2.4 - Stored Cross-Site Scripting (XSS)
Slug
newstatpress
Published
2015-06-08
Title
Newstatpress < 1.0.1 - SQL Injection
Slug
newstatpress
Published
2022-01-13
Title
NewStatPress < 1.3.6 - Reflected Cross-Site Scripting
Slug
newstatpress
Published
2025-12-11
Title
NewStatPress < 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newsticker
Published
2024-11-08
Title
News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nex-forms
Published
2021-07-20
Title
NEX Forms < 7.8.8 - Authentication Bypass for Excel Reports
Slug
nex-forms
Published
2021-07-20
Title
NEX Forms < 7.8.8 - Authentication Bypass for PDF Reports
Slug
nex-forms-express-wp-form-builder
Published
2015-04-21
Title
NEX-Forms - Ultimate Form builder <= 3.0 - SQL Injection
Slug
nex-forms-express-wp-form-builder
Published
2015-07-16
Title
NEX-Forms < 4.6.1 - Unauthenticated Blind SQL Injection
Slug
nex-forms-express-wp-form-builder
Published
2021-11-15
Title
NEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRF
Slug
nex-forms-express-wp-form-builder
Published
2022-08-01
Title
NEX-Forms < 7.9.7 - Authenticated SQLi
Slug
nex-forms-express-wp-form-builder
Published
2023-02-28
Title
NEX-Forms < 8.3.3 - Contributor+ Stored XSS
Slug
nex-forms-express-wp-form-builder
Published
2020-11-27
Title
NEX-Forms < 7.8 - Subscriber+ Unauthorised AJAX Calls
Slug
nex-forms-express-wp-form-builder
Published
2023-04-17
Title
NEX-Forms < 8.4 - Admin+ SQL Injection