WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
nirweb-support
Published
2022-05-02
Title
Nirweb support < 2.8.2 - Unauthenticated SQLi
Slug
nirweb-support
Published
2025-01-31
Title
Nirweb support <= 3.0.3 - Missing Authorization
Slug
nite-shortcodes
Published
2025-01-16
Title
Nite Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nitek-carousel-cool-transitions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
nitek-carousel-cool-transitions
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
nitek-carousel-cool-transitions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
nitropack
Published
2023-12-28
Title
NitroPack < 1.10.3 - Multiple CSRF
Slug
nitropack
Published
2023-11-07
Title
NitroPack < 1.10.0 - Missing Authorization via multiple AJAX functions
Slug
nitropack
Published
2024-08-26
Title
NitroPack < 1.16.8 - Unauthenticated Arbitrary Shortcode Execution
Slug
nitropack
Published
2025-01-14
Title
NitroPack < 1.17.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update
Slug
nitropack
Published
2025-01-14
Title
NitroPack < 1.17.6 - Subscriber+ Limited Options Update
Slug
nitropack
Published
2025-09-09
Title
NitroPack < 1.18.5 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update via nitropack_set_compression_ajax Function
Slug
nitropack
Published
2026-02-18
Title
NitroPack <= 1.19.3 - Missing Authorization
Slug
nix-anti-spam-light
Published
2024-11-15
Title
NIX Anti-Spam Light <= 0.0.4 - Unauthenticated PHP Object Injection
Slug
nix-anti-spam-light
Published
2025-09-22
Title
NIX Anti-Spam Light <= 0.0.4 - Cross-Site Request Forgery
Slug
nk-themes-helper
Published
2026-01-08
Title
nK Themes Helper <= 1.7.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
nktagcloud
Published
2022-07-18
Title
Better Tag Cloud <= 0.99.5 - Admin+ Stored Cross-Site Scripting
Slug
nlinks
Published
2017-11-22
Title
InLinks 1.0 - Authenticated SQL Injection
Slug
nm-gift-registry-and-wishlist-lite
Published
2026-02-18
Title
NM Gift Registry and Wishlist Lite < 5.14 - Missing Authorization
Slug
nm-visitors
Published
2024-09-25
Title
WordPress Visitors <= 1.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Header
Slug
nmedia-mailchimp-widget
Published
2014-08-01
Title
Nmedia MailChimp 3.1 - api_mailchimp/postToMailChimp.php abs_path Parameter XSS
Slug
nmedia-mailchimp-widget
Published
2025-03-27
Title
Nmedia MailChimp <= 5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
nmedia-user-file-uploader
Published
2014-08-01
Title
N-Media File Uploader < 2.0 Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2014-09-28
Title
N-Media File Uploader < 3.5 Arbitrary File Upload
Slug
nmedia-user-file-uploader
Published
2015-06-10
Title
N-Media File Uploader <= 3.7 - Arbitrary File Upload