WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
official-mailerlite-sign-up-forms
Published
2024-04-29
Title
MailerLite – Signup forms (official) 1.5.0 - 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
official-mailerlite-sign-up-forms
Published
2024-04-29
Title
MailerLite – Signup forms (official) < 1.7.7 - Missing Authorization
Slug
official-mailerlite-sign-up-forms
Published
2025-12-11
Title
MailerLite – Signup forms (official) < 1.7.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
official-mailerlite-sign-up-forms
Published
2026-01-28
Title
MailerLite – Signup forms (official) < 1.7.19 - Missing Authorization
Slug
official-mailerlite-sign-up-forms
Published
2026-09-23
Title
MailerLite – Signup forms (official) < 1.7.22 - Missing Authorization to Authenticated (Contributor+) Form Creation and Deletion
Slug
official-saleswizard-crm
Published
2024-11-08
Title
Official SalesWizard CRM Plugin < 1.0.4 - Contributor+ Stored XSS
Slug
official-sendle-shipping-method
Published
2023-10-12
Title
Sendle Shipping < 5.18 - Reflected XSS
Slug
official-sendle-shipping-method
Published
2025-09-26
Title
Sendle Shipping < 6.03 - Cross-Site Request Forgery
Slug
official-sendle-shipping-method
Published
2025-10-19
Title
Sendle Shipping < 6.03 - Missing Authorization
Slug
official-skrill-woocommerce
Published
2025-03-11
Title
Skrill Official < 1.0.67 - Settings Update via CSRF
Slug
official-statcounter-plugin-for-wordpress
Published
2022-01-26
Title
StatCounter < 2.0.7 - Admin+ Stored Cross-Site Scripting
Slug
official-statcounter-plugin-for-wordpress
Published
2026-02-18
Title
Official StatCounter Plugin < 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Nickname
Slug
official-statcounter-plugin-for-wordpress
Published
2026-05-28
Title
StatCounter < 2.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via Author Nickname
Slug
official-statcounter-plugin-for-wordpress
Published
2026-06-26
Title
StatCounter – Free Real Time Visitor Stats < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
offload-videos-bunny-netaws-s3
Published
2024-06-05
Title
Offload Videos – Bunny.net, AWS S3 <= 1.0.1 Subscriber+ CSRF
Slug
offsprout-page-builder
Published
2025-05-30
Title
Offsprout Page Builder 2.2.1 - 2.15.2 - Contributor+ Privilege Escalation
Slug
og-tags
Published
2021-09-28
Title
OG Tags < 2.0.2 - Plugin's Settings Update via CSRF
Slug
oganro-reservation-widget
Published
2025-06-19
Title
XML Travel Portal Widget <= 2.0 - Cross-Site Request Forgery
Slug
oganro-travel-portal-search-widget-for-hotelbeds-apitude-api
Published
2025-06-19
Title
Oganro Travel Portal Search Widget for HotelBeds APITUDE API <= 1.0 - Cross-Site Request Forgery
Slug
ogulo-360-tour
Published
2025-08-22
Title
Ogulo – 360° Tour < 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via slug Parameter
Slug
oh-add-script-header-footer
Published
2026-08-27
Title
SOGO Add Script to Individual Pages Header Footer <= 3.9 - Contributor+ Stored XSS via Post Metabox
Slug
ohio-extra
Published
2025-02-24
Title
Ohio Extra <= 3.4.7 - Unauthenticated Arbitrary Shortcode Execution
Slug
ohio-extra
Published
2025-11-04
Title
Ohio Extra < 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ohio-extra
Published
2026-10-04
Title
Ohio Extra <= 3.6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
oi-yamaps
Published
2023-01-23
Title
Oi Yandex.Maps <= 3.2.7 - Contributor+ Stored XSS