WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
p1m-media-manager
Published
2014-08-01
Title
p1m media manager - SQL Injection
Slug
p3
Published
2019-03-29
Title
Pipdig Power Pack < 4.8.0 - Vendor Backdoors & Suspicious Code
Slug
p3-profiler
Published
2015-04-20
Title
P3 (Plugin Performance Profiler) <= 1.5.3.8 - Cross-Site Scripting (XSS)
Slug
package-quantity-xforwc
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
packlink-pro-shipping
Published
2024-07-11
Title
Packlink PRO shipping module < 3.4.7 - Missing Authorization
Slug
padma-advanced
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
pafacile
Published
2025-01-16
Title
PAFacile <= 2.6.1 - Reflected Cross-Site Scripting
Slug
pagbank-connect
Published
2025-09-09
Title
PagBank / PagSeguro Connect para WooCommerce < 4.44.4 - Authenticated (Shop Manager+) SQL Injection
Slug
page-and-post-lister
Published
2025-02-21
Title
Page and Post Lister <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Slug
page-and-post-restriction
Published
2022-04-01
Title
Page Restriction WordPress < 1.2.7 - Admin+ Stored Cross-Site Scripting
Slug
page-and-post-restriction
Published
2024-02-27
Title
Page Restriction WordPress (WP) < 1.3.5 - Unauthenticated Protected Post Access
Slug
page-and-post-restriction
Published
2024-12-19
Title
Page Restriction WordPress (WP) – Protect WP Pages/Post < 1.3.7 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
page-blocks
Published
2025-10-10
Title
Page Blocks <= 1.1.0 - Cross-Site Request Forgery
Slug
page-builder-add
Published
2021-12-16
Title
Landing Page Builder < 1.4.9.6 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
page-builder-add
Published
2022-12-27
Title
Landing Page Builder < 1.4.9.9 - Contributor+ Cross-Site Scripting via Shortcode
Slug
page-builder-add
Published
2023-08-22
Title
Landing Page Builder < 1.5.1.3 - Admin+ Stored XSS
Slug
page-builder-add
Published
2023-11-23
Title
Landing Page Builder < 1.5.1.6 - Open Redirect
Slug
page-builder-add
Published
2024-03-28
Title
Landing Page Builder < 1.5.1.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
page-builder-add
Published
2024-05-14
Title
Landing Page Builder < 1.5.1.9 - Reflected Cross-Site Scripting via pageType
Slug
page-builder-add
Published
2024-08-16
Title
Landing Page Builder < 1.5.2.1 - Authenticated (Editor+) Local File Inlcusion
Slug
page-builder-by-azexo
Published
2023-06-02
Title
Page Builder by AZEXO <= 1.27.133 - Contributor+ Stored Cross-Site Scripting via shortcode
Slug
page-builder-by-azexo
Published
2023-06-02
Title
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery (CSRF)
Slug
page-builder-by-azexo
Published
2023-06-02
Title
Page Builder by AZEXO <= 1.27.133 - Subscriber+ Post Creation
Slug
page-builder-by-azexo
Published
2023-06-02
Title
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery (CSRF) to Stored XSS
Slug
page-builder-sandwich
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius