WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
navis-documentcloud
Published
2015-08-26
Title
Navis DocumentCloud 0.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
navz-photo-gallery
Published
2021-12-20
Title
ACF Photo Gallery Field < 1.7.5 - Reflected Cross-Site Scripting
Slug
navz-photo-gallery
Published
2023-07-26
Title
ACF Photo Gallery Field < 2.0 - Subscriber+ UserMeta Update
Slug
navz-photo-gallery
Published
2024-01-30
Title
ACF Photo Gallery Field < 2.7 - Missing Authorization
Slug
navz-photo-gallery
Published
2026-02-18
Title
ACF Photo Gallery Field < 3.1 - Missing Authorization to Authenticated (Subscriber+) Attachment Metadata Modification
Slug
nazy-load
Published
2025-10-31
Title
Flying Images: Optimize and Lazy Load Images for Faster Page Speed < 2.4.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
nblocks
Published
2024-11-18
Title
nBlocks <= 1.0.2 - Authenticated (Contributor+) Local File Inclusion
Slug
nc-wishlist-for-woocommerce
Published
2025-01-07
Title
NC Wishlist for Woocommerce <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Slug
nd-booking
Published
2019-08-05
Title
ND Booking < 2.5 - Unauthenticated Options Change
Slug
nd-booking
Published
2022-05-26
Title
Hotel Booking < 3.3 - Contributor+ Stored XSS
Slug
nd-booking
Published
2025-04-17
Title
Hotel Booking < 3.7 - Unauthenticated Local File Inclusion
Slug
nd-booking
Published
2025-05-07
Title
Hotel Booking < 3.7 - Authenticated (Contributor+) Local File Inclusion
Slug
nd-booking
Published
2025-06-27
Title
Hotel Booking < 3.8 - Authenticated (Contributor+) Local File Inclusion
Slug
nd-booking
Published
2025-12-31
Title
Hotel Booking <= 3.8 - Missing Authorization
Slug
nd-donations
Published
2019-08-03
Title
ND Donations < 1.4 - Unauthenticated Options Change
Slug
nd-donations
Published
2022-03-29
Title
Donations <= 1.8 - Unauthenticated SQLi
Slug
nd-donations
Published
2022-05-13
Title
Donations <= 1.8 - Contributor+ Stored Cross-Site Scripting
Slug
nd-elements
Published
2024-05-31
Title
Elements For Elementor < 2.2 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributes
Slug
nd-learning
Published
2019-08-06
Title
ND Learning <= 4.7 - Unauthenticated Options Change
Slug
nd-learning
Published
2021-12-29
Title
Learning Courses < 5.0 - Admin+ Stored Cross-Site Scripting
Slug
nd-projects
Published
2022-02-01
Title
Cost Calculator <= 1.8 - Authenticated Local File Inclusion
Slug
nd-projects
Published
2022-02-01
Title
Cost Calculator < 1.6 - Contributor+ Stored Cross-Site Scripting
Slug
nd-projects
Published
2023-02-13
Title
Cost Calculator <= 1.8 - Contributor+ Stored XSS
Slug
nd-projects
Published
2023-03-02
Title
Cost Calculator <= 1.8 - Contributor+ Stored XSS
Slug
nd-restaurant-reservations
Published
2019-08-09
Title
ND Restaurant Reservations < 1.5 - Unauthenticated Options Change