WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
newstatpress
Published
2015-06-08
Title
Newstatpress < 1.0.1 - SQL Injection
Slug
newstatpress
Published
2022-01-13
Title
NewStatPress < 1.3.6 - Reflected Cross-Site Scripting
Slug
newstatpress
Published
2025-12-11
Title
NewStatPress < 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
newstatpress
Published
2026-07-13
Title
NewStatPress < 1.4.5 - Unauthenticated Stored XSS via Top Post Widget
Slug
newstatpress
Published
2026-10-13
Title
NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via 'urlrequested' Attribute via Query String
Slug
newstatpress
Published
2026-10-13
Title
NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via URL Request Tracking (urlrequested field)
Slug
newsticker
Published
2024-11-08
Title
News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nex-forms
Published
2021-07-20
Title
NEX Forms < 7.8.8 - Authentication Bypass for Excel Reports
Slug
nex-forms
Published
2021-07-20
Title
NEX Forms < 7.8.8 - Authentication Bypass for PDF Reports
Slug
nex-forms-express-wp-form-builder
Published
2015-04-21
Title
NEX-Forms - Ultimate Form builder <= 3.0 - SQL Injection
Slug
nex-forms-express-wp-form-builder
Published
2015-07-16
Title
NEX-Forms < 4.6.1 - Unauthenticated Blind SQL Injection
Slug
nex-forms-express-wp-form-builder
Published
2021-11-15
Title
NEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRF
Slug
nex-forms-express-wp-form-builder
Published
2022-08-01
Title
NEX-Forms < 7.9.7 - Authenticated SQLi
Slug
nex-forms-express-wp-form-builder
Published
2023-02-28
Title
NEX-Forms < 8.3.3 - Contributor+ Stored XSS
Slug
nex-forms-express-wp-form-builder
Published
2020-11-27
Title
NEX-Forms < 7.8 - Subscriber+ Unauthorised AJAX Calls
Slug
nex-forms-express-wp-form-builder
Published
2023-04-17
Title
NEX-Forms < 8.4 - Admin+ SQL Injection
Slug
nex-forms-express-wp-form-builder
Published
2023-06-26
Title
NEX-Forms < 8.4.4 - Authenticated Stored XSS
Slug
nex-forms-express-wp-form-builder
Published
2023-12-21
Title
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 8.5.6 - Authenticated (Admin+) SQL Injection
Slug
nex-forms-express-wp-form-builder
Published
2023-12-28
Title
NEX-Forms – Ultimate Form Builder < 8.5.5 - Cross-Site Request Forgery
Slug
nex-forms-express-wp-form-builder
Published
2024-01-31
Title
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 8.5.7 - Missing Authorization via restore_records()
Slug
nex-forms-express-wp-form-builder
Published
2024-01-31
Title
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 8.5.7 - Missing Authorization via set_starred()
Slug
nex-forms-express-wp-form-builder
Published
2024-01-31
Title
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 8.5.7 - Missing Authorization via set_read()
Slug
nex-forms-express-wp-form-builder
Published
2024-02-12
Title
NEX-Forms – Ultimate Form Builder < 8.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
nex-forms-express-wp-form-builder
Published
2024-07-05
Title
NEX-Forms – Ultimate Form Builder < 8.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nex-forms-express-wp-form-builder
Published
2024-09-30
Title
NEX-Forms – Ultimate Form Builder < 8.7.4 - Reflected Cross-Site Scripting