WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
nelio-ab-testing
Published
2016-12-08
Title
Nelio AB Testing <= 4.5.8 - Server Side Request Forgery (SSRF)
Slug
nelio-ab-testing
Published
2017-05-11
Title
Nelio Ab Testing < 4.6.4 - CSRF
Slug
nelio-ab-testing
Published
2016-12-29
Title
Nelio Ab Testing < 4.5.11 - SSRF
Slug
nelio-ab-testing
Published
2026-01-20
Title
Nelio AB Testing < 8.2.0 - Authenticated (Editor+) Remote Code Execution
Slug
nelio-ab-testing
Published
2026-02-19
Title
Nelio AB Testing < 8.2.5 - Authenticated (Editor+) SQL Injection
Slug
nelio-ab-testing
Published
2026-03-23
Title
Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization < 8.2.8 - Authenticated (Editor+) Remote Code Execution
Slug
nelio-ab-testing
Published
2026-03-17
Title
Nelio AB Testing < 8.3.0 - Unauthenticated Information Exposure
Slug
nelio-content
Published
2024-03-29
Title
Nelio Content < 3.2.1 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
nelio-content
Published
2025-10-05
Title
Nelio Content < 4.0.6 - Missing Authorization
Slug
nelio-content
Published
2026-01-21
Title
Nelio Content < 4.2.1 - Authenticated (Contributor+) SQL Injection
Slug
nelio-content
Published
2026-03-19
Title
Nelio Content < 4.3.2 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
nelio-content
Published
2026-06-26
Title
Nelio Content – Editorial Calendar & Social Media Auto-Posting < 4.3.5 - Missing Authorization
Slug
nelio-content
Published
2026-10-02
Title
Nelio Content < 4.5.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Reusable Message Deletion via 'id' Parameter
Slug
nelio-popups
Published
2025-12-10
Title
Nelio Popups < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nelio-popups
Published
2026-01-29
Title
Nelio Popups < 1.3.6 - Missing Authorization
Slug
nemesis-all-in-one
Published
2025-04-01
Title
Nemesis All-in-One <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
neoforum
Published
2026-01-10
Title
Neoforum <= 1.0 - Reflected Cross-Site Scripting
Slug
neoforum
Published
2026-01-10
Title
Neoforum <= 1.0 - Authenticated (Administrator+) SQL Injection
Slug
neon-channel-product-customizer-free
Published
2025-08-14
Title
Neon Channel Product Customizer Free < 3.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Slug
neon-product-designer-for-woocommerce
Published
2025-01-13
Title
Neon Product Designer <= 2.2.0 - Contributor+ SQL Injection
Slug
neon-product-designer-for-woocommerce
Published
2025-04-09
Title
Neon Product Designer <= 2.2.0 - Unauthenticated SQL Injection
Slug
neon-text
Published
2023-10-26
Title
Neon text < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
neos-connector-for-fakturama
Published
2026-03-20
Title
Neos Connector for Fakturama <= 0.0.14 - Cross-Site Request Forgery to Settings Update
Slug
nepali-date-converter
Published
2025-04-11
Title
Nepali Date Converter < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nepali-date-utilities
Published
2025-04-09
Title
Nepali Date Utilities < 1.1.0 - Stored XSS via CSRF