WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
player-leaderboard
Published
2025-12-11
Title
Player Leaderboard 1.0.0 - 1.0.2 - Authenticated (Contributor+) Local File Inclusion
Slug
playerjs
Published
2025-02-24
Title
PlayerJS < 2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
playerjs
Published
2025-09-22
Title
PlayerJS < 2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
playerzbr
Published
2025-10-21
Title
Playerzbr <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Meta Field
Slug
playlist-for-youtube
Published
2024-05-08
Title
Playlist for Youtube < 1.40 - Editor+ Stored XSS
Slug
plenigo
Published
2024-11-08
Title
Plenigo <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
plerdy-heatmap
Published
2023-11-14
Title
Website Optimization – Plerdy < 1.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
plestar-directory-listing
Published
2025-01-16
Title
Plestar Directory Listing <= 1.0 - Reflected Cross-Site Scripting
Slug
plethora-tabs-accordions
Published
2025-01-24
Title
Plethora Plugins Tabs + Accordions < 1.2 - Contributor+ Stored XSS
Slug
plethora-tabs-accordions
Published
2025-01-24
Title
Plethora Plugins Tabs + Accordions < 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
plexx-elementor-extension
Published
2024-10-14
Title
Plexx Elementor Extension < 1.3.7 - Contributor+ Stored XSS
Slug
plezi
Published
2022-03-07
Title
Plezi < 1.0.3 - Unauthenticated Stored XSS
Slug
plezi
Published
2024-12-13
Title
Plezi < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
plg_novana
Published
2014-08-01
Title
Plg Novana - wp-content/plugins/plg_novana/novana_detail.php id Parameter SQL Injection
Slug
plinks
Published
2025-01-16
Title
Powie's pLinks PagePeeker <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
plisio-payment-gateway-for-woocommerce
Published
2026-04-15
Title
Accept Cryptocurrencies with Plisio <= 2.0.6 - Missing Authorization
Slug
plms
Published
2024-10-17
Title
Property Lot Management System <= 1.0 - Authenticated (Salesman+) Arbitrary File Upload
Slug
ploxel
Published
2025-01-30
Title
Ticketmeo – Sell Tickets – Event Ticketing < 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
plugin-central
Published
2015-11-24
Title
Plugin Central <= 2.5 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
plugin-central
Published
2025-04-24
Title
Plugin Central <= 2.5.1 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
plugin-groups
Published
2024-02-20
Title
Plugin Groups < 2.0.7 - Missing Authorization to Unauthenticated Denial of Service
Slug
plugin-inspector
Published
2025-06-27
Title
Plugin Inspector <= 1.5 - Authenticated (Admin+) Arbitrary File Download
Slug
plugin-logic
Published
2022-12-02
Title
Plugin Logic < 1.0.8 - Admin+ SQLi
Slug
plugin-newsletter
Published
2014-08-01
Title
Plugin Newsletter 1.5 - Remote File Disclosure
Slug
plugin-notes-plus
Published
2024-07-09
Title
Plugin Notes Plus < 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting