WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
page-builder-add
Published
2026-06-29
Title
Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages < 1.5.3.6 - Unauthenticated Stored Cross-Site Scripting
Slug
page-builder-add
Published
2026-07-15
Title
Landing Page Builder < 1.5.3.7 - Cross-Site Request Forgery to ulpb_admin_data AJAX Action
Slug
page-builder-by-azexo
Published
2023-06-02
Title
Page Builder by AZEXO <= 1.27.133 - Contributor+ Stored Cross-Site Scripting via shortcode
Slug
page-builder-by-azexo
Published
2023-06-02
Title
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery (CSRF)
Slug
page-builder-by-azexo
Published
2023-06-02
Title
Page Builder by AZEXO <= 1.27.133 - Subscriber+ Post Creation
Slug
page-builder-by-azexo
Published
2023-06-02
Title
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery (CSRF) to Stored XSS
Slug
page-builder-sandwich
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
page-builder-sandwich
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
page-builder-sandwich
Published
2024-03-04
Title
Page Builder Sandwich <= 5.1.0 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Post Editing
Slug
page-builder-sandwich
Published
2024-03-04
Title
Page Builder Sandwich – Front End WordPress Page Builder Plugin <= 5.1.0 - Sensitive Information Exposure
Slug
page-builder-sandwich
Published
2024-06-21
Title
Page Builder Sandwich – Front-End Page Builder <= 5.1.0 - Missing Authorization
Slug
page-builder-sandwich
Published
2024-06-21
Title
Page Builder Sandwich – Front-End Page Builder <= 5.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
page-builder-wp
Published
2026-09-18
Title
WP Composer < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pbwp_raw_shortcode' Shortcode
Slug
page-expire-popup
Published
2026-01-05
Title
Page Expire Popup/Redirection for WordPress < 1.1 - Authenticated (Author+) SQL Injection via 'id' Shortcode Attribute
Slug
page-flip-image-gallery
Published
2014-08-01
Title
Page Flip Image Gallery <= 0.2.2 - Remote FD Vuln
Slug
page-generator
Published
2021-09-20
Title
Page Generator < 1.5.9 - Reflected Cross-Site Scripting
Slug
page-generator
Published
2022-06-27
Title
Page Generator Plugin < 1.6.6 - Arbitrary Keywords Deletion/Duplication via CSRF
Slug
page-generator
Published
2022-06-27
Title
Page Generator Plugin < 1.6.5 - Admin+ Stored Cross-Site Scripting
Slug
page-generator
Published
2023-12-28
Title
Page Generator < 1.7.2 - Authenticated(Administrator+) SQL Injection
Slug
page-health-o-meter
Published
2025-01-16
Title
Page Health-O-Meter <= 2.0 - Reflected Cross-Site Scripting
Slug
page-keys
Published
2026-01-06
Title
Page Keys < 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'page_key' Parameter
Slug
page-layout-builder
Published
2014-08-01
Title
Page Layout Builder 1.3.4 - includes/layout-settings.php layout_settings_id Parameter Reflected XSS
Slug
page-layout-builder
Published
2014-08-01
Title
Page Layout Builder 1.3.4 - Unspecified Issue
Slug
page-layout-builder
Published
2016-04-12
Title
MiniMax <= 2.0.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
page-list
Published
2022-12-27
Title
Page-list < 5.3 - Contributor+ Stored XSS