WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pods
Published
2024-03-28
Title
Pods < 3.1 - Contributor+ SQLi
Slug
pods
Published
2024-03-28
Title
Pods < 3.1 - Contributor+ Pods/Users Creation
Slug
pods
Published
2024-03-28
Title
Pods < 3.1 - Contributor+ Remote Code Execution
Slug
pods
Published
2024-05-09
Title
Pods – Custom Content Types and Fields < 3.2.1.1 - Contributor+ Stored Cross-Site Scripting via Pod Form Redirect URL
Slug
pods
Published
2024-10-15
Title
Pods < 3.2.7.1 - Admin+ Stored XSS
Slug
pods
Published
2024-12-16
Title
Pods – Custom Content Types and Fields < 3.2.8.1 - Admin+ Stored XSS
Slug
pods
Published
2025-03-02
Title
Pods < 3.2.8.2 - Admin+ SQL Injection
Slug
poeditor
Published
2023-08-07
Title
POEditor < 0.9.8 - Settings Reset via CSRF
Slug
poeditor
Published
2023-10-03
Title
POEditor < 0.9.5 - CSRF
Slug
poeditor
Published
2024-04-12
Title
POEditor < 0.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
poeditor
Published
2025-06-05
Title
POEditor < 0.9.11 - Cross-Site Request Forgery
Slug
point-maker
Published
2024-10-15
Title
Point Maker < 0.1.5 - Authenticated (Contributor+) Local File Inclusion
Slug
point-maker
Published
2025-03-04
Title
Point Maker <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
points-and-rewards-for-woocommerce
Published
2026-01-19
Title
Points and Rewards for WooCommerce < 2.9.6 - Missing Authorization
Slug
pojo-accessibility
Published
2025-04-09
Title
One Click Accessibility < 3.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
pojo-accessibility
Published
2025-10-15
Title
Ally - Web Accessibility & Usability < 3.8.1 - Cross-Site Request Forgery to Plugin Settings Update
Slug
pojo-accessibility
Published
2026-02-19
Title
Ally < 4.0.3 - Missing Authorization
Slug
pojo-accessibility
Published
2026-03-10
Title
Ally < 4.1.0 - Unauthenticated SQLi via URL Path
Slug
pojo-forms
Published
2024-12-05
Title
Pojo Forms < 1.4.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via form_preview_shortcode
Slug
policy-genius
Published
2025-01-10
Title
Policy Genius <= 2.0.4 - Reflected XSS
Slug
poll-builder
Published
2024-12-11
Title
Poll Builder <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
poll-maker
Published
2021-06-29
Title
Poll Maker < 3.2.1 - Authenticated Blind SQL Injections
Slug
poll-maker
Published
2021-07-28
Title
Poll Maker < 3.2.9 - Reflected Cross-Site Scripting
Slug
poll-maker
Published
2021-09-13
Title
Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection
Slug
poll-maker
Published
2022-05-04
Title
Poll Maker < 4.0.2 - Admin+ Stored Cross-Site Scripting