WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
name-directory
Published
2025-04-17
Title
Name Directory < 1.30.1 - Missing Authorization
Slug
name-directory
Published
2026-01-13
Title
Name Directory < 1.31.0 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters
Slug
name-directory
Published
2026-02-09
Title
Name Directory < 1.32.1 - Unauthenticated Stored Cross-Site Scripting via Double HTML-Entity Encoding in Submission Form
Slug
nanosupport
Published
2025-03-31
Title
NanoSupport <= 0.6.0 - Missing Authorization
Slug
nanosupport
Published
2025-04-01
Title
NanoSupport <= 0.6.0 - Reflected Cross-Site Scripting
Slug
nari-accountant
Published
2025-11-03
Title
Nari Accountant <= 1.0.12 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
narnoo-commerce-manager
Published
2024-11-04
Title
Narnoo Commerce Manager <= 1.6.0 - Reflected Cross-Site Scripting
Slug
narnoo-distributor
Published
2022-03-01
Title
Narnoo Distributor <= 2.5.1 - Unauthenticated LFI to Arbitrary File Read / RCE
Slug
narnoo-shortcodes
Published
2025-03-19
Title
Narnoo Operator <= 2.0.0 - Reflected Cross-Site Scripting
Slug
nasa-core
Published
2025-05-16
Title
Nasa Core < 6.4.4 - Authenticated (Contributor+) Local File Inclusion
Slug
nasa-core
Published
2025-05-21
Title
Nasa Core <= 6.3.2 - Unauthenticated Local File Inclusion
Slug
nasa-core
Published
2025-06-03
Title
Nasa Core < 6.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nasa-core
Published
2025-06-12
Title
Nasa Core < 6.4.4. - Reflected Cross-Site Scripting
Slug
national-weather-service-alerts
Published
2025-06-23
Title
National Weather Service Alerts <= 1.3.5 - Unauthenticated Local File Inclusion
Slug
nativery
Published
2025-01-14
Title
Nativery <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nautic-pages
Published
2025-04-30
Title
Nautic Pages <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
navayan-csv-export
Published
2024-12-14
Title
Navayan CSV Export <= 1.0.9 - Unauthenticated SQL Injection
Slug
navayan-subscribe
Published
2025-06-27
Title
Navayan Subscribe <= 1.13 - Cross-Site Request Forgery
Slug
navegg
Published
2025-04-24
Title
Navegg Analytics <= 3.3.3 - Cross-Site Request Forgery
Slug
naver-analytics
Published
2025-01-03
Title
NAVER Analytics <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
naver-blog-api
Published
2024-11-01
Title
Naver Blog <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
naver-map
Published
2023-01-11
Title
Naver Map <= 1.1.0 - Contributor+ Stored XSS
Slug
navigation-du-lapin-blanc
Published
2025-01-14
Title
Navigation Du Lapin Blanc <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
navigation-menu-as-dropdown-widget
Published
2024-04-16
Title
Navigation menu as Dropdown Widget < 1.3.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
navigation-tree-elementor
Published
2025-03-25
Title
Navigation Tree Elementor <= 1.0.1 - Authenticated (Subscriber+) SQL Injection