WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pc-robotstxt
Published
2021-03-29
Title
Virtual Robots.txt < 1.10 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
pcloud-backup
Published
2025-04-01
Title
pCloud Backup <= 1.0.1 - Missing Authorization
Slug
pcloud-wp-backup
Published
2026-07-02
Title
pCloud WP Backup <= 2.0.4 - Cross-Site Request Forgery
Slug
pcloud-wp-backup
Published
2026-07-16
Title
pCloud WP Backup < 2.0.4 - Missing Authorization on the 'start_backup' AJAX Method to Authenticated (Subscriber+) Arbitrary File Read
Slug
pcrecruiter-extensions
Published
2024-12-19
Title
PCRecruiter Extensions < 1.4.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-block
Published
2023-10-12
Title
PDF Block <= 1.1.0 - Contributor+ Stored XSS
Slug
pdf-builder-for-wpforms
Published
2024-03-25
Title
PDF Builder for WPForms < 1.2.89 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-builder-for-wpforms
Published
2024-08-08
Title
PDF Builder for WPForms < 1.2.117 - Unauthenticated Full Path Disclosure
Slug
pdf-catalog-for-woocommerce
Published
2025-12-04
Title
PDF Catalog for WooCommerce <= 1.1.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
pdf-catalog-woocommerce
Published
2025-01-07
Title
PDF Catalog Woocommerce < 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-creator-lite
Published
2025-10-29
Title
PDF Creator Lite <= 1.2 - Cross-Site Request Forgery
Slug
pdf-embedder
Published
2024-03-18
Title
PDF Embedder < 4.7.1 - Contributor+ Stored XSS
Slug
pdf-embedder
Published
2024-05-20
Title
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Slug
pdf-embedder
Published
2026-05-27
Title
PDF Embedder < 5.0.0 - Authenticated (Contributor+) Information Exposure via Block Editor Page
Slug
pdf-embedder-fay
Published
2024-11-08
Title
Pdf Embedder Fay <= 1.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-for-contact-form-7
Published
2025-12-11
Title
PDF for Contact Form 7 + Drag and Drop Template Builder < 6.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Duplication
Slug
pdf-for-contact-form-7
Published
2025-08-23
Title
PDF for Contact Form 7 < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection
Slug
pdf-for-elementor-forms
Published
2025-08-27
Title
PDF for Elementor Forms + Drag And Drop Template Builder < 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-for-elementor-forms
Published
2025-08-22
Title
PDF for Elementor Forms + Drag And Drop Template Builder < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection
Slug
pdf-for-elementor-forms
Published
2026-02-11
Title
PDF for Elementor Forms + Drag And Drop Template Builder < 6.5.0 - Missing Authorization
Slug
pdf-for-elementor-forms
Published
2026-05-20
Title
PDF for Elementor Forms + Drag And Drop Template Builder < 5.6.1 - Missing Authorization
Slug
pdf-for-gravity-forms
Published
2025-08-23
Title
PDF for Gravity Forms + Drag And Drop Template Builder < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection
Slug
pdf-for-woocommerce
Published
2025-01-24
Title
PDF Invoices for WooCommerce + Drag and Drop Template Builder < 4.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-for-woocommerce
Published
2025-05-07
Title
PDF Invoices for WooCommerce + Drag and Drop Template Builder < 5.4.0 - Authenticated (Administrator+) SQL Injection
Slug
pdf-for-woocommerce
Published
2025-08-23
Title
PDF Invoice Builder for WooCommerce < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection