WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
page-scroll-to-id
Published
2022-12-21
Title
Page Scroll To ID < 1.7.6 - Contributor+ Stored XSS
Slug
page-scroll-to-id
Published
2024-02-16
Title
Page scroll to id < 1.7.9 - Contributor+ Stored XSS
Slug
page-showcaser-boxes
Published
2014-08-01
Title
Page Showcaser Boxes - Title Field Stored XSS
Slug
page-specific-sidebars
Published
2024-11-01
Title
Simple Page Specific Sidebars <= 2.14.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
page-studio-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
page-studio-lite
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
page-takeover
Published
2025-03-28
Title
Page Takeover < 1.1.7 - Admin+ Stored XSS
Slug
page-title-splitter
Published
2025-12-31
Title
Page Title Splitter <= 2.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
page-transition
Published
2025-08-19
Title
Page Transition <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
page-views-count
Published
2021-07-12
Title
Page View Counts < 2.4.9 - Contributor+ Stored XSS
Slug
page-views-count
Published
2022-02-01
Title
Page Views Count < 2.4.15 - Unauthenticated SQL Injection
Slug
page-views-count
Published
2022-10-13
Title
Page View Count < 2.5.6 - Settings Reset via CSRF
Slug
page-views-count
Published
2023-01-10
Title
Page View Count < 2.6.1 - Contributor+ Stored XSS
Slug
page-views-count
Published
2025-04-30
Title
Page View Count 2.8.0 - 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Slug
page-views-count
Published
2025-12-08
Title
Page View Count <= 2.8.7 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
page-visit-counter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
page-visit-counter
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pagebar
Published
2022-06-15
Title
Pagebar < 2.70 - Arbitrary Settings Update via CSRF to Stored XSS
Slug
paged-gallery
Published
2025-06-05
Title
Paged Gallery <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pagelayer
Published
2020-12-10
Title
Pagelayer < 1.3.5 - Multiple Reflected Cross-Site Scripting (XSS)
Slug
pagelayer
Published
2020-05-28
Title
Page Builder: PageLayer - Drag and Drop website builder < 1.1.2 - Unprotected AJAX's leading to XSS
Slug
pagelayer
Published
2020-05-28
Title
Page Builder: PageLayer - Drag and Drop website builder < 1.1.2 - CSRF leading to XSS
Slug
pagelayer
Published
2023-09-25
Title
PageLayer < 1.7.7 - Unauthenticated Stored XSS
Slug
pagelayer
Published
2023-09-25
Title
PageLayer < 1.7.8 - Author+ Stored XSS
Slug
pagelayer
Published
2023-09-13
Title
PageLayer < 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting