WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
otpless
Published
2025-04-14
Title
OTP-less one tap Sign in < 2.0.59 - Reflected Cross-Site Scripting
Slug
otpless
Published
2025-05-01
Title
OTP-less one tap Sign in 2.0.14 - 2.0.59 - Unauthenticated Arbitrary Email Update to Account Takeover/Privilege Escalation
Slug
otter-blocks
Published
2023-05-02
Title
Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization
Slug
otter-blocks
Published
2024-03-13
Title
Otter Blocks < 2.6.5 - Contributor+ Stored Cross-Site Scripting
Slug
otter-blocks
Published
2024-03-28
Title
Otter Blocks < 2.6.6 - Contributor+ Stored XSS
Slug
otter-blocks
Published
2024-03-28
Title
Otter Blocks < 2.6.6 - Contributor+ Stored XSS
Slug
otter-blocks
Published
2024-04-10
Title
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE < 2.6.9 - Contributor+ Stored Cross-Site Scripting via Block Attributes
Slug
otter-blocks
Published
2024-04-10
Title
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE < 2.6.9 - Author+ Stored XSS via SVG Upload
Slug
otter-blocks
Published
2024-04-16
Title
Otter Blocks < 2.6.10 - Contributor+ Stored XSS via titleTag
Slug
otter-blocks
Published
2024-10-31
Title
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE < 3.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
otter-blocks
Published
2024-11-01
Title
Otter - Gutenberg Block < 3.0.4 - Missing Authorization
Slug
otter-blocks
Published
2024-11-26
Title
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE < 3.0.7 - Unauthetnicated Path Traversal to Arbitrary Image View
Slug
otter-blocks
Published
2025-08-27
Title
Otter - Gutenberg Block < 3.1.1 - Unauthenticated Sensitive Information Exposure
Slug
otter-blocks
Published
2026-04-29
Title
Otter Blocks < 3.1.5 - Unauthenticated Purchase Verification Bypass via Forged Cookie
Slug
otter-blocks
Published
2026-09-06
Title
Otter Blocks < 3.1.8 - Missing Authorization to Unauthenticated Purchase Verification Bypass
Slug
otter-blocks
Published
2026-10-01
Title
Otter Blocks < 3.2.7 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget
Slug
otter-blocks
Published
2026-10-16
Title
Otter Blocks < 3.2.3 - Unauthenticated Open Redirect via Stripe Checkout Block
Slug
otter-blocks
Published
2026-10-21
Title
Otter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API
Slug
otter-blocks
Published
2026-10-21
Title
Otter Blocks < 3.2.8 - Contributor+ Stored XSS via Block Style Attributes
Slug
otter-blocks
Published
2026-10-21
Title
Otter Blocks 3.1.1 - 3.2.7 - Unauthenticated Non-Public Content Disclosure via REST API
Slug
otter-blocks
Published
2026-10-21
Title
Otter Blocks < 3.2.8 - Unauthenticated Stored XSS via Dynamic Content Render Filter
Slug
otter-pro
Published
2024-03-06
Title
Otter Blocks PRO < 2.6.4 - Unauthenticated Stored Cross-Site Scripting via SVG Upload
Slug
otter-pro
Published
2024-03-06
Title
Otter Blocks PRO < 2.6.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSS
Slug
otter-pro
Published
2024-06-06
Title
Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE < 2.6.12 - Authenticated (Subscriber+) Information Exposure
Slug
otw-portfolio-manager
Published
2025-08-21
Title
Portfolio Manager Pro 3.8 - Unauthenticated PHP Object Injection