WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
order-status-for-woocommerce
Published
2024-12-03
Title
Additional Custom Order Status for WooCommerce < 1.6.1 - Reflected Cross-Site Scripting
Slug
order-status-rules-for-woocommerce
Published
2025-03-27
Title
Scheduled & Automatic Order Status Controller for WooCommerce < 3.7.2 - Open Redirect
Slug
order-tip-woo
Published
2024-03-19
Title
Order Tip for WooCommerce < 1.4.0 - Missing Authorization to Unauthenticated Data Export
Slug
order-tip-woo
Published
2025-08-14
Title
Order Tip for WooCommerce < 1.5.5 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts
Slug
order-tracking
Published
2023-08-28
Title
Order Tracking Pro < 3.3.7 - Admin+ Stored Cross-Site Scripting
Slug
order-tracking
Published
2023-08-28
Title
Order Tracking Pro < 3.3.7 - Reflected Cross-Site Scripting
Slug
order-tracking
Published
2024-08-16
Title
Order Tracking < 3.3.13 - Missing Authorization via send_test_email()
Slug
order-tracking
Published
2026-01-31
Title
Order Tracking <= 3.4.4 - Missing Authorization
Slug
order-xml-file-export-import-for-woocommerce
Published
2018-12-28
Title
Order XML File Export Import for WooCommerce <= 1.2.2 - XSS
Slug
order-xml-file-export-import-for-woocommerce
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
order-your-posts-manually
Published
2023-05-10
Title
Order Your Posts Manually <= 2.2.5 - Reflected XSS
Slug
order-your-posts-manually
Published
2023-05-10
Title
Order Your Posts Manually <= 2.2.5 - Admin+ SQLi
Slug
orderable
Published
2026-02-18
Title
Orderable <= 1.20.0 - Subscriber+ Arbitrary Plugin Installation
Slug
orders-chat-for-woocommerce
Published
2025-12-31
Title
Orders Chat for WooCommerce <= 1.2.0 - Missing Authorization
Slug
organization-chart
Published
2023-02-23
Title
Organization chart < 1.4.5 - Multiple CSRF
Slug
organization-chart
Published
2023-01-27
Title
Organization Chart < 1.4.5 - Admin+ Stored XSS
Slug
organization-chart
Published
2024-08-07
Title
Organization chart < 1.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description Parameters
Slug
organization-chart
Published
2026-05-25
Title
Organization chart < 1.7.6 - Cross-Site Request Forgery
Slug
organizer
Published
2012-04-23
Title
Organizer <= 1.2.1 - Cross Site Scripting / Path Disclosure
Slug
original-texts-yandex-webmaster
Published
2023-10-26
Title
Original texts Yandex WebMaster <= 1.18 - Cross-Site Request Forgery
Slug
originality-ai
Published
2025-10-23
Title
Originality.ai AI Checker <= 1.0.16 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'ai_get_table'
Slug
originality-ai
Published
2025-10-23
Title
Originality.ai AI Checker <= 1.0.12 - Subscriber+ Scan Log Deletion
Slug
orion-login-with-sms
Published
2025-07-21
Title
Orion Login with SMS <= 1.0.5 - Authenticated Bypass via Weak OTP
Slug
orion-sms-otp-verification
Published
2025-10-14
Title
Orion SMS OTP Verification < 2.0.0 - Authentication Bypass via Account Takeover
Slug
os-bxslider
Published
2024-11-08
Title
OS BXSlider <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting