WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
paytr-taksit-tablosu-woocommerce
Published
2023-11-20
Title
PayTR Taksit Tablosu < 1.3.2 - Unauthenticated Settings Update
Slug
paytr-taksit-tablosu-woocommerce
Published
2023-12-07
Title
PayTR Taksit Tablosu <= 1.3.4 - CSRF
Slug
payu-india
Published
2024-02-26
Title
PayU India <= 3.8.8 - Reflected XSS via type
Slug
payu-india
Published
2025-01-06
Title
PayU CommercePro Plugin < 3.8.4 - Unauthenticated Privilege Escalation
Slug
payu-india
Published
2025-06-05
Title
PayU CommercePro Plugin < 3.8.8 - Authentication Bypass
Slug
pb-mailcrypt-antispam-email-encryption
Published
2024-04-29
Title
PB MailCrypt <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pb-oembed-html5-audio-with-cache-support
Published
2024-02-12
Title
PB oEmbed HTML5 Audio <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
pb-seo-friendly-images
Published
2023-03-15
Title
PB SEO Friendly Images <= 4.0.5 - Admin+ Stored XSS
Slug
pc-robotstxt
Published
2021-03-29
Title
Virtual Robots.txt < 1.10 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
pcloud-backup
Published
2025-04-01
Title
pCloud Backup <= 1.0.1 - Missing Authorization
Slug
pcrecruiter-extensions
Published
2024-12-19
Title
PCRecruiter Extensions < 1.4.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-block
Published
2023-10-12
Title
PDF Block <= 1.1.0 - Contributor+ Stored XSS
Slug
pdf-builder-for-wpforms
Published
2024-03-25
Title
PDF Builder for WPForms < 1.2.89 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-builder-for-wpforms
Published
2024-08-08
Title
PDF Builder for WPForms < 1.2.117 - Unauthenticated Full Path Disclosure
Slug
pdf-catalog-for-woocommerce
Published
2025-12-04
Title
PDF Catalog for WooCommerce <= 1.1.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
pdf-catalog-woocommerce
Published
2025-01-07
Title
PDF Catalog Woocommerce < 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-creator-lite
Published
2025-10-29
Title
PDF Creator Lite <= 1.2 - Cross-Site Request Forgery
Slug
pdf-embedder
Published
2024-03-18
Title
PDF Embedder < 4.7.1 - Contributor+ Stored XSS
Slug
pdf-embedder
Published
2024-05-20
Title
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Slug
pdf-embedder
Published
2026-05-27
Title
PDF Embedder < 5.0.0 - Authenticated (Contributor+) Information Exposure via Block Editor Page
Slug
pdf-embedder-fay
Published
2024-11-08
Title
Pdf Embedder Fay <= 1.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-for-contact-form-7
Published
2025-12-11
Title
PDF for Contact Form 7 + Drag and Drop Template Builder < 6.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Duplication
Slug
pdf-for-contact-form-7
Published
2025-08-23
Title
PDF for Contact Form 7 < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection
Slug
pdf-for-elementor-forms
Published
2025-08-27
Title
PDF for Elementor Forms + Drag And Drop Template Builder < 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-for-elementor-forms
Published
2025-08-22
Title
PDF for Elementor Forms + Drag And Drop Template Builder < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection