WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
off-canvas-sidebars
Published
2024-03-25
Title
Off-Canvas Sidebars & Menus (Slidebars) < 0.5.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
off-canvas-sidebars
Published
2025-03-27
Title
Off-Canvas Sidebars & Menus (Slidebars) < 0.5.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
off-canvas-sidebars
Published
2025-06-23
Title
Off-Canvas Sidebars & Menus (Slidebars) < 0.5.8.5 - Reflected Cross-Site Scripting
Slug
off-canvas-sidebars
Published
2025-08-24
Title
Off-Canvas Sidebars & Menus (Slidebars) < 0.5.9 - Cross-Site Request Forgery
Slug
off-page-seo
Published
2025-03-19
Title
Off Page SEO <= 3.0.3 - Reflected Cross-Site Scripting
Slug
office-locator
Published
2024-11-20
Title
Office Locator <= 1.3.0 - Authenticated (Contributor+) Local File Inclusion
Slug
office-locator
Published
2025-04-15
Title
Office Locator <= 1.3.0 - Unauthenticated SQL Injection
Slug
official-facebook-pixel
Published
2021-03-25
Title
Facebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings Deletion
Slug
official-facebook-pixel
Published
2021-03-25
Title
Facebook for WordPress < 3.0.0 - PHP Object Injection with POP Chain
Slug
official-mailerlite-sign-up-forms
Published
2020-05-25
Title
Official MailerLite Sign Up Forms < 1.4.4 - Unauthenticated SQL Injection
Slug
official-mailerlite-sign-up-forms
Published
2020-05-25
Title
Official MailerLite Sign Up Forms < 1.4.5 - Multiple CSRF Issues
Slug
official-mailerlite-sign-up-forms
Published
2022-05-18
Title
MailerLite < 1.5.4 - Reflected Cross-Site Scripting
Slug
official-mailerlite-sign-up-forms
Published
2022-08-01
Title
MailerLite - Signup forms (official) < 1.5.8 - API Key Update via CSRF
Slug
official-mailerlite-sign-up-forms
Published
2024-04-29
Title
MailerLite – Signup forms (official) 1.5.0 - 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
official-mailerlite-sign-up-forms
Published
2024-04-29
Title
MailerLite – Signup forms (official) < 1.7.7 - Missing Authorization
Slug
official-mailerlite-sign-up-forms
Published
2025-12-11
Title
MailerLite – Signup forms (official) < 1.7.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
official-saleswizard-crm
Published
2024-11-08
Title
Official SalesWizard CRM Plugin < 1.0.4 - Contributor+ Stored XSS
Slug
official-sendle-shipping-method
Published
2023-10-12
Title
Sendle Shipping < 5.18 - Reflected XSS
Slug
official-sendle-shipping-method
Published
2025-09-26
Title
Sendle Shipping < 6.03 - Cross-Site Request Forgery
Slug
official-sendle-shipping-method
Published
2025-10-19
Title
Sendle Shipping < 6.03 - Missing Authorization
Slug
official-skrill-woocommerce
Published
2025-03-11
Title
Skrill Official < 1.0.67 - Settings Update via CSRF
Slug
official-statcounter-plugin-for-wordpress
Published
2022-01-26
Title
StatCounter < 2.0.7 - Admin+ Stored Cross-Site Scripting
Slug
offload-videos-bunny-netaws-s3
Published
2024-06-05
Title
Offload Videos – Bunny.net, AWS S3 <= 1.0.1 Subscriber+ CSRF
Slug
offsprout-page-builder
Published
2025-05-30
Title
Offsprout Page Builder 2.2.1 - 2.15.2 - Contributor+ Privilege Escalation
Slug
og-tags
Published
2021-09-28
Title
OG Tags < 2.0.2 - Plugin's Settings Update via CSRF