WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
open-rdw-kenteken-voertuiginformatie
Published
2023-03-17
Title
Open RDW kenteken voertuiginformatie < 2.1.0 - Reflected XSS
Slug
open-social
Published
2023-02-15
Title
WP Open Social <= 5.0 - Admin+ Stored XSS
Slug
open-user-map
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
open-user-map
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
open-user-map
Published
2023-10-18
Title
Open User Map | Everybody can add locations < 1.3.27 - Admin+ Stored XSS
Slug
open-user-map
Published
2025-09-22
Title
Open User Map < 1.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
open-user-map
Published
2026-02-16
Title
Open User Map < 1.4.17 - Authenticated (Subscriber+) Arbitrary File Download
Slug
open-user-map
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
openai-tools-for-wp-wc
Published
2025-04-01
Title
OpenAI Tools for WordPress & WooCommerce <= 2.1.5 - Missing Authorization
Slug
openbook-book-data
Published
2022-05-31
Title
OpenBook Book Data <= 3.5.2 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
opencart-product-display
Published
2024-11-08
Title
OpenCart Product Display <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
opencart-product-in-wp
Published
2025-01-03
Title
Opencart Product in WP <= 1.0.1 - Reflected Cross-Site Scripting
Slug
opengraph
Published
2024-06-04
Title
Open Graph < 1.11.3 - Unauthenticated Sensitive Information Exposure
Slug
openid
Published
2024-03-29
Title
OpenID <= 3.6.1 - Reflected Cross-Site Scripting
Slug
opening-hours
Published
2022-09-20
Title
We’re Open! < 1.42 - Admin+ Stored Cross-Site Scripting
Slug
opening-hours
Published
2023-02-27
Title
We’re Open! < 1.47 - Admin+ Stored XSS
Slug
opening-hours
Published
2022-09-09
Title
We’re Open! < 1.38 - Admin+ Stored XSS
Slug
opening-hours
Published
2023-02-01
Title
We’re Open! < 1.45 - Missing Authorization
Slug
opening-hours
Published
2023-02-02
Title
We’re Open! < 1.46 - Cross-Site Request Forgery
Slug
openinviter-for-wordpress
Published
2014-08-01
Title
OpenInviter - Error Log Information Disclosure
Slug
openpgp-form-encryption
Published
2024-06-22
Title
OpenPGP Form Encryption for WordPress < 1.5.1 - Contributor+ Stored XSS
Slug
openpix-for-woocommerce
Published
2026-01-20
Title
OpenPix <= 2.13.3 - Subscriber+ Payment Gateway Settings Reset
Slug
opensea
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
opensea
Published
2022-04-04
Title
Opensea < 1.0.3 - Admin+ Stored XSS
Slug
opensea
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting