WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
podlove-subscribe-button
Published
2023-02-15
Title
Podlove Subscribe button < 1.3.9 - Admin+ Stored XSS
Slug
podlove-subscribe-button
Published
2023-02-15
Title
Podlove Subscribe button < 1.3.9 - Multiple CSRF
Slug
podlove-subscribe-button
Published
2024-02-06
Title
Podlove Subscribe button < 1.3.11 - Authenticated (Contributor+) SQL Injection
Slug
podlove-subscribe-button
Published
2025-09-22
Title
Podlove Subscribe button < 1.3.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
podlove-web-player
Published
2024-03-25
Title
Podlove Web Player < 5.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
podlove-web-player
Published
2024-06-06
Title
Podlove Web Player < 5.7.4 - Missing Authorization to Unauthenticated Information Exposure
Slug
podlove-web-player
Published
2026-03-03
Title
Podlove Web Player < 5.9.2 - Authenticated (Contributor+) PHP Object Injection
Slug
podpress
Published
2014-08-01
Title
podPress 8.8.10.13 - players/1pixelout/1pixelout_player.swf playerID Parameter XSS
Slug
pods
Published
2015-01-12
Title
Pods < 2.5 - Authenticated XSS & CSRF
Slug
pods
Published
2015-03-16
Title
Pods 1.4.7 <= 2.5.1.1 - Blind SQL Injection
Slug
pods
Published
2021-01-15
Title
Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
pods
Published
2021-01-15
Title
Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
pods
Published
2021-08-06
Title
Pods < 2.7.29 - Multiple Authenticated Stored Cross-Site Scripting (XSS)
Slug
pods
Published
2023-01-20
Title
Pods < 2.9.11 - Pods Deletion via CSRF
Slug
pods
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pods
Published
2024-03-28
Title
Pods < 3.1 - Contributor+ SQLi
Slug
pods
Published
2024-03-28
Title
Pods < 3.1 - Contributor+ Pods/Users Creation
Slug
pods
Published
2024-03-28
Title
Pods < 3.1 - Contributor+ Remote Code Execution
Slug
pods
Published
2024-05-09
Title
Pods – Custom Content Types and Fields < 3.2.1.1 - Contributor+ Stored Cross-Site Scripting via Pod Form Redirect URL
Slug
pods
Published
2024-10-15
Title
Pods < 3.2.7.1 - Admin+ Stored XSS
Slug
pods
Published
2024-12-16
Title
Pods – Custom Content Types and Fields < 3.2.8.1 - Admin+ Stored XSS
Slug
pods
Published
2025-03-02
Title
Pods < 3.2.8.2 - Admin+ SQL Injection
Slug
pods
Published
2026-06-15
Title
Pods – Custom Content Types and Fields < 3.3.9 - Unauthenticated Stored Cross-Site Scripting
Slug
poeditor
Published
2023-08-07
Title
POEditor < 0.9.8 - Settings Reset via CSRF
Slug
poeditor
Published
2023-10-03
Title
POEditor < 0.9.5 - CSRF