WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
note-press
Published
2017-02-26
Title
Note Press < 0.1.2 - SQL Injection
Slug
note-press
Published
2022-05-09
Title
Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions
Slug
note-press
Published
2022-05-09
Title
Note Press <= 0.1.10 - Admin+ SQLi via id
Slug
note-press
Published
2022-05-09
Title
Note Press <= 0.1.10 - Admin+ SQLi via Update
Slug
noted-pro
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
noted-pro
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
notely
Published
2025-09-26
Title
Notely < 1.9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
notibar
Published
2024-12-12
Title
Notibar – Notification Bar for WordPress < 2.1.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via njt_nofi_text
Slug
notibar
Published
2024-12-11
Title
Notibar < 2.1.5 - Missing Authorization via ajax_install_plugin
Slug
notibar
Published
2025-03-05
Title
Notibar < 2.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
notice-bar
Published
2023-10-02
Title
Notice Bar < 3.1.1 - Contributor+ Stored XSS
Slug
notice-bar
Published
2025-08-20
Title
Notice Bar < 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
notice-board
Published
2022-09-14
Title
Notice Board <= 1.1 - Contributor+ Stored Cross-Site Scripting
Slug
notice-board-by-towkir
Published
2025-01-24
Title
NOTICE BOARD BY TOWKIR <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
notice-faq
Published
2025-01-24
Title
WordPress SEO Friendly Accordion FAQ with AI assisted content generation <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
notices
Published
2014-08-01
Title
Notices Ticker 5.0 - Cross-Site Request Forgery
Slug
notices
Published
2021-09-09
Title
Notices <= 6.1 - Reflected Cross-Site Scripting
Slug
notif-bell
Published
2025-02-11
Title
Notif Bell < 0.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
notification
Published
2021-10-25
Title
Notification < 8.0.0 - Admin+ Stored Cross-Site Scripting
Slug
notification
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
notification-for-telegram
Published
2024-10-09
Title
Notification for Telegram < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Send Telegram Test Message
Slug
notification-for-telegram
Published
2025-09-05
Title
Notification for Telegram < 3.5.2 - Cross-Site Request Forgery
Slug
notification-for-telegram
Published
2025-11-29
Title
Notification for Telegram < 3.5.2 - Missing Authorization
Slug
notification-for-telegram
Published
2026-04-20
Title
Notification for Telegram < 3.5.1 - Unauthenticated Stored Cross-Site Scripting
Slug
notification-for-telegram
Published
2026-07-10
Title
Notification for Telegram < 3.5.2 - Missing Authorization to Authenticated (Subscriber+) Cron Modification via nftb_cron_action_set AJAX Action