WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
order-tracking
Published
2024-08-16
Title
Order Tracking < 3.3.13 - Missing Authorization via send_test_email()
Slug
order-xml-file-export-import-for-woocommerce
Published
2018-12-28
Title
Order XML File Export Import for WooCommerce <= 1.2.2 - XSS
Slug
order-xml-file-export-import-for-woocommerce
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
order-your-posts-manually
Published
2023-05-10
Title
Order Your Posts Manually <= 2.2.5 - Reflected XSS
Slug
order-your-posts-manually
Published
2023-05-10
Title
Order Your Posts Manually <= 2.2.5 - Admin+ SQLi
Slug
orderable
Published
2026-02-18
Title
Orderable <= 1.20.0 - Subscriber+ Arbitrary Plugin Installation
Slug
orders-chat-for-woocommerce
Published
2025-12-31
Title
Orders Chat for WooCommerce <= 1.2.0 - Missing Authorization
Slug
organization-chart
Published
2023-02-23
Title
Organization chart < 1.4.5 - Multiple CSRF
Slug
organization-chart
Published
2023-01-27
Title
Organization Chart < 1.4.5 - Admin+ Stored XSS
Slug
organization-chart
Published
2024-08-07
Title
Organization chart < 1.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description Parameters
Slug
organizer
Published
2012-04-23
Title
Organizer <= 1.2.1 - Cross Site Scripting / Path Disclosure
Slug
original-texts-yandex-webmaster
Published
2023-10-26
Title
Original texts Yandex WebMaster <= 1.18 - Cross-Site Request Forgery
Slug
originality-ai
Published
2025-10-23
Title
Originality.ai AI Checker <= 1.0.16 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'ai_get_table'
Slug
originality-ai
Published
2025-10-23
Title
Originality.ai AI Checker <= 1.0.12 - Subscriber+ Scan Log Deletion
Slug
orion-login-with-sms
Published
2025-07-21
Title
Orion Login with SMS <= 1.0.5 - Authenticated Bypass via Weak OTP
Slug
orion-sms-otp-verification
Published
2025-10-14
Title
Orion SMS OTP Verification < 2.0.0 - Authentication Bypass via Account Takeover
Slug
os-bxslider
Published
2024-11-08
Title
OS BXSlider <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
os-datahub-maps
Published
2026-02-02
Title
OS DataHub Maps < 1.8.4 - Authenticated (Author+) Arbitrary File Upload
Slug
os-diagnosis-generator
Published
2025-06-05
Title
診断ジェネレータ作成プラグイン <= 1.4.16 - Missing Authorization
Slug
os-our-team
Published
2024-11-08
Title
OS Our Team <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
os-pricing-tables
Published
2024-11-08
Title
OS Pricing Tables <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
osd-subscribe
Published
2021-09-09
Title
OSD Subscribe <= 1.2.3 - Reflected Cross-Site Scripting
Slug
ose-firewall
Published
2014-08-01
Title
Centrora Security 3.2.1 - Multiple Admin Actions CSRF
Slug
oshine-core
Published
2025-09-22
Title
Oshine Core <= 1.5.5 - Missing Authorization
Slug
oshine-modules
Published
2025-01-27
Title
Oshine Modules < 3.3.8 - Unauthenticated Server-Side Request Forgery