WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
notifier
Published
2025-06-19
Title
WANotifier <= 2.7.12 - Missing Authorization
Slug
notifier
Published
2026-01-20
Title
WANotifier <= 2.7.12 - Missing Authorization
Slug
notifikacie-sk
Published
2025-01-16
Title
Notifikácie.sk <= 1.0 - Reflected Cross-Site Scripting
Slug
notify-odoo
Published
2025-01-03
Title
Notify Odoo < 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
notifyvisitors-lead-form
Published
2023-08-30
Title
NotifyVisitors <= 1.0 - Admin+ Stored XSS
Slug
nova-blocks
Published
2024-09-09
Title
Nova Blocks by Pixelgrade < 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
Slug
nova-blocks
Published
2025-04-01
Title
Nova Blocks by Pixelgrade < 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nova-blocks
Published
2026-01-26
Title
Nova Blocks < 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nova-poshta-ttn
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
nova-poshta-ttn
Published
2024-12-29
Title
Shipping for Nova Poshta plugin for WordPress < 1.19.7 - Unauthenticated SQL Injection
Slug
noveldesign-store-directory
Published
2024-11-08
Title
The Novel Design Store Directory <= 4.3.0 - Unauthenticated Arbitrary File Upload
Slug
novelist
Published
2023-05-22
Title
Novelist < 1.2.1 - Admin+ Stored XSS
Slug
novelist
Published
2024-04-11
Title
Novelist < 1.2.3 - Cross-Site Request Forgery
Slug
novelist
Published
2025-03-27
Title
Novelist < 1.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
novo-map
Published
2023-10-18
Title
Novo-Map : your WP posts on custom google maps <= 1.1.2 - CSRF
Slug
nowpayments-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
nps-computy
Published
2024-03-25
Title
NPS computy < 2.7.6 - Admin+ Stored XSS
Slug
nps-computy
Published
2024-03-25
Title
NPS computy < 2.7.6 - Results Deletion via CSRF
Slug
nps-computy
Published
2024-12-03
Title
NPS computy < 2.8.1 - Reflected Cross-Site Scripting
Slug
nps-computy
Published
2026-02-04
Title
NPS computy < 2.8.3 - Unauthenticated Stored Cross-Site Scripting
Slug
ns-coupon-to-become-customer
Published
2023-04-24
Title
NS Coupon to Become Customer <= 1.2.2 - Admin+ Stored Cross-Site Scripting
Slug
ns-facebook-pixel-for-wp
Published
2023-01-21
Title
Advanced Social Pixel <= 2.1.1 - Admin+ Stored XSS
Slug
ns-ie-compatibility-fixer
Published
2026-01-06
Title
NS IE Compatibility Fixer <= 2.1.5 - Cross-Site Request Forgery to Plugin Settings Update
Slug
ns-maintenance-mode-for-wp
Published
2025-10-08
Title
NS Maintenance Mode for WP <= 1.3.1 - Admin+ Stored XSS
Slug
ns-maintenance-mode-for-wp
Published
2025-10-01
Title
NS Maintenance Mode for WP <= 1.3.1 - Unauthenticated Subscribers Export