WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
passwordless-login
Published
2024-03-18
Title
Passwordless Login < 1.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
passwordless-wp
Published
2025-01-16
Title
Passwordless WP – Login with your glance or fingerprint <= 1.1.6 - Reflected Cross-Site Scripting
Slug
passwords-manager
Published
2025-01-15
Title
Passwords Manager < 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Add Password + Update Encryption Key
Slug
passwords-manager
Published
2025-01-15
Title
Passwords Manager < 1.5.1 - Authenticated (Subscriber+) SQL Injection
Slug
passwords-manager
Published
2025-01-15
Title
Passwords Manager < 1.5.1 - Unauthenticated SQL Injection
Slug
past-events-extension
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
past-events-extension
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
past-events-extension
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pastebin-embed
Published
2025-01-16
Title
Pastebin <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pathomation
Published
2024-11-20
Title
Pathomation <= 2.5.1 - Unauthenticated Arbitrary File Upload
Slug
pathomation
Published
2025-02-24
Title
Pathomation <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
patreon-connect
Published
2018-11-23
Title
Patreon Connect < 1.2.2 - PHP Object Injection
Slug
patreon-connect
Published
2021-03-26
Title
Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure
Slug
patreon-connect
Published
2021-03-26
Title
Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta
Slug
patreon-connect
Published
2021-03-26
Title
Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon
Slug
patreon-connect
Published
2021-03-26
Title
Patreon WordPress < 1.7.2 - Reflected XSS on Login Form
Slug
patreon-connect
Published
2021-03-26
Title
Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX action
Slug
patreon-connect
Published
2022-02-21
Title
Patreon WordPress < 1.8.2 - Admin+ Stored Cross-Site Scripting
Slug
patreon-connect
Published
2023-11-07
Title
Patreon WordPress < 1.8.8 - Cross-Site Request Forgery
Slug
patreon-connect
Published
2024-06-28
Title
Patreon WordPress < 1.9.1 - Protection Mechanism Bypass
Slug
patreon-connect
Published
2025-01-24
Title
Patreon WordPress < 1.9.2 - Missing Authorization
Slug
patron-button-and-widgets-by-codebard
Published
2023-07-24
Title
CodeBard's Patron Button and Widgets for Patreon < 2.1.9 - Reflected XSS
Slug
patron-button-and-widgets-by-codebard
Published
2023-11-07
Title
CodeBard's Patron Button and Widgets for Patreon < 2.2.0 - Reflected XSS
Slug
patron-button-and-widgets-by-codebard
Published
2023-11-14
Title
CodeBard's Patron Button and Widgets for Patreon < 2.2.0 - Cross-Site Request Forgery
Slug
patron-button-and-widgets-by-codebard
Published
2024-04-29
Title
CodeBard's Patron Button and Widgets for Patreon <= 2.2.0 - Reflected Cross-Site Scripting