WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
permalink-manager
Published
2022-12-14
Title
Permalink Manager Lite < 2.3.0 - Authenticated Stored XSS
Slug
permalink-manager
Published
2024-03-18
Title
Permalink Manager < 2.4.3.2 - Missing Authorization to Authenticated(Author+) arbitrary post slug modification
Slug
permalink-manager
Published
2024-03-20
Title
Permalink Manager Lite and Permalink Manager pro < 2.4.3.2 - Reflected Cross-Site Scripting
Slug
permalink-manager
Published
2024-03-20
Title
Plugin Permalink < 2.4.3.2 - Missing Authorization via get_uri_editor
Slug
permalink-manager
Published
2024-03-15
Title
Permalink Manager Lite < 2.4.3.1 - Reflected Cross-Site Scripting
Slug
permalink-manager
Published
2024-06-27
Title
Permalink Manager Lite < 2.4.3.4 - Reflected Cross-Site Scripting
Slug
permalink-manager
Published
2024-08-27
Title
Permalink Manager Lite < 2.4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Slug
permalink-manager
Published
2025-09-06
Title
Permalink Manager Lite < 2.5.1.4 - Unauthenticated Sensitive Information Exposure
Slug
permalink-manager
Published
2026-02-25
Title
Permalink Manager Lite < 2.5.3 - Missing Authorization
Slug
permalink-manager
Published
2026-06-16
Title
Permalink Manager Lite < 2.5.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
Slug
permalink-manager-for-woocommerce
Published
2026-07-02
Title
Permalink Manager for WooCommerce < 1.0.8.4 - Cross-Site Request Forgery
Slug
permalink-manager-pro
Published
2022-01-17
Title
Permalink Manager < 2.2.15 - Reflected Cross-Site Scripting
Slug
permalinks-customizer
Published
2023-11-14
Title
Permalinks Customizer <= 2.8.2 - Reflected Cross-Site Scripting
Slug
persian-admin-fonts
Published
2025-10-21
Title
Persian Admnin Fonts < 4.1.05 - Missing Authorization
Slug
persian-elementor
Published
2026-07-29
Title
Persian Elementor < 2.8.2 - Unauthenticated Price Manipulation via ZarinPal Widget
Slug
persian-elementor
Published
2026-09-09
Title
Persian Elementor < 2.8.2 - Unauthenticated ZarinPal Payment Callback Authority Bypass
Slug
persian-fonts
Published
2024-01-30
Title
Persian Fonts <= 1.6 - Admin+ Stored XSS
Slug
persian-gravity-forms
Published
2026-07-12
Title
sync-basalam < 3.0.3 - Authenticated (Administrator+) SQL Injection
Slug
persian-nested-showhide-text
Published
2024-11-08
Title
Persian Nested Show/Hide Text <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
persian-woocommerce
Published
2022-02-15
Title
Persian Woocommerce < 5.9.8 - Reflected Cross-Site Scripting
Slug
persian-woocommerce
Published
2024-08-09
Title
Persian WooCommerce < 9.0.0 - Missing Authorization
Slug
persian-woocommerce-shipping
Published
2025-03-27
Title
persian-woocommerce-shipping < 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
persian-woocommerce-shipping
Published
2026-07-23
Title
افزونه حمل و نقل ووکامرس | پست پیشتاز، تیپاکس و پیک موتوری <= 4.4.5 - Cross-Site Request Forgery
Slug
persian-woocommerce-sms
Published
2016-04-21
Title
Persian Woocommerce SMS <= 3.3.3 - Reflected Cross-Site Scripting (XSS)
Slug
persian-woocommerce-sms
Published
2024-10-16
Title
Persian WooCommerce SMS < 7.0.3 - Reflected Cross-Site Scripting