WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
olivewp-companion
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
olympus-google-fonts
Published
2021-08-23
Title
Fonts Plugin < 3.0.3 - Contributor+ Stored Cross-Site Scripting
Slug
olympus-google-fonts
Published
2024-08-16
Title
Fonts < 3.7.8 - Missing Authorization
Slug
olympus-google-fonts
Published
2024-08-16
Title
Fonts < 3.7.8 - Cross-Site Request Forgery
Slug
olympus-shortcodes
Published
2024-11-08
Title
Olympus Shortcodes <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
om-stripe
Published
2025-02-04
Title
OM Stripe <= 02.00.00 - Reflected XSS
Slug
omigo
Published
2026-02-06
Title
OMIGO <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
omni-secure-files
Published
2012-06-07
Title
Omni Secure Files 0.1.13 - Unauthenticated Arbitrary File Upload
Slug
omnify-widget
Published
2025-03-24
Title
Omnify <= 2.0.3 - Reflected Cross-Site Scripting
Slug
omnileads-scripts-and-tags-manager
Published
2025-03-28
Title
OmniLeads Scripts and Tags Manager <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
omnipress
Published
2024-10-15
Title
Omnipress < 1.5.0 - Contributor+ Stored XSS
Slug
omnipress
Published
2025-03-13
Title
Omnipress < 1.5.5 - Authenticated (Contributor+) Post Disclosure
Slug
omnipress
Published
2025-06-27
Title
Omnipress < 1.6.5 - Contributor+ Stored XSS
Slug
omnipress
Published
2025-12-04
Title
Omnipress < 1.6.6 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
omnipress
Published
2026-01-24
Title
Omnipress <= 1.6.7 - Authenticated (Contributor+) Local File Inclusion
Slug
omnipress
Published
2026-01-25
Title
Omnipress <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
omnisend
Published
2026-09-30
Title
Newsletters, Email Marketing, SMS and Popups by Omnisend < 1.9.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
omnisend-connect
Published
2023-11-07
Title
Email Marketing for WooCommerce by Omnisend < 1.13.9 - Sensitive Information Exposure
Slug
omnisend-connect
Published
2024-04-11
Title
Email Marketing for WooCommerce by Omnisend < 1.14.4 - Cross-Site Request Forgery
Slug
omnisend-connect
Published
2026-05-13
Title
Omnisend for WooCommerce < 1.18.1 - Unauthenticated Omnisend Account Takeover via Predictable Connect Token
Slug
omnisend-connect
Published
2026-06-26
Title
Email Marketing for WooCommerce by Omnisend < 1.19.1 - Missing Authorization
Slug
omnishop
Published
2025-07-22
Title
Omnishop <= 1.0.9 - Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST Endpoint
Slug
omnishop
Published
2025-07-22
Title
Omnishop <= 1.0.9 - Cross-Site Request Forgery to Arbitrary User Deletion via /users/delete REST Endpoint
Slug
omplag
Published
2025-12-11
Title
Complag <= 1.0.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
onceki-yazi-linki
Published
2025-02-24
Title
Önceki Yazı Link <= 1.3 - Cross-Site Request Forgery