WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
news-kit-elementor-addons
Published
2025-04-04
Title
News Kit Elementor Addons <= 1.4.2 - Contributor+ Stored XSS
Slug
news-kit-elementor-addons
Published
2025-07-16
Title
News Kit Elementor Addons < 1.3.5 - Missing Authorization
Slug
news-list
Published
2025-02-04
Title
News List <= 1.0 - Reflected XSS
Slug
news-magazine-and-blog-elements
Published
2025-04-01
Title
News, Magazine and Blog Elements <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
news-ticker-for-elementor
Published
2024-12-11
Title
News Ticker for Elementor <= 2.1.3 - Missing Authorization
Slug
news-ticker-widget-for-elementor
Published
2025-01-07
Title
News Ticker Widget for Elementor < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
news-wall
Published
2024-03-28
Title
News Wall <= 1.1.0 - Cross-Site Request Forgery to Plugin Settings Update
Slug
newsboard
Published
2025-04-09
Title
NewsBoard Post and RSS Scroller <= 1.2.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
newsletter
Published
2013-02-03
Title
Newsletter < 3.0.9 - SQL Injection
Slug
newsletter
Published
2013-05-14
Title
Newsletter < 3.2.7 - Cross-Site Scripting (XSS)
Slug
newsletter
Published
2015-03-30
Title
Newsletter 3.7.0 - Open Redirect
Slug
newsletter
Published
2020-03-16
Title
Newsletter < 6.5.4 - CSV Injection
Slug
newsletter
Published
2020-07-12
Title
Newsletter < 6.7.7 - Authenticated Stored Cross-Site Scripting
Slug
newsletter
Published
2020-08-03
Title
Newsletter < 6.8.2 - Authenticated Cross-Site Scripting (XSS)
Slug
newsletter
Published
2020-08-03
Title
Newsletter < 6.8.2 - Authenticated PHP Object Injection
Slug
newsletter
Published
2022-05-23
Title
Newsletter < 7.4.5 - Reflected Cross-Site Scripting
Slug
newsletter
Published
2022-05-30
Title
Newsletter < 7.4.6 - Admin+ Stored Cross-Site Scripting
Slug
newsletter
Published
2023-03-27
Title
Newsletter < 7.6.9 - Reflected XSS
Slug
newsletter
Published
2023-09-06
Title
Newsletter < 7.9.0 - Contributor+ Stored XSS
Slug
newsletter
Published
2024-03-28
Title
Newsletter < 8.2.1 - IP Spoofing
Slug
newsletter
Published
2024-06-04
Title
Newsletter < 8.3.5 - Unauthenticated Stored Cross-Site Scripting via np1
Slug
newsletter
Published
2025-04-14
Title
Newsletter < 8.7.1 - Admin+ Stored XSS
Slug
newsletter
Published
2025-05-13
Title
Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription
Slug
newsletter
Published
2025-05-19
Title
Newsletter < 8.8.5 - Admin+ Stored XSS via Form
Slug
newsletter
Published
2025-05-19
Title
Newsletter < 8.8.5 - Admin+ Stored XSS via Widget