WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
popup-maker
Published
2025-06-02
Title
Popup Maker < 1.20.5 - Contributor+ Stored XSS via popupID Parameter
Slug
popup-maker
Published
2025-09-25
Title
Popup Maker < 1.21.0 - Contributor+ Stored XSS via title Parameter
Slug
popup-maker-wp
Published
2024-05-17
Title
Popup Maker < 1.3.7 - Subscriber+ Stored XSS
Slug
popup-manager
Published
2022-11-28
Title
Popup Manager <= 1.6.6 - Unauthenticated Stored XSS
Slug
popup-manager
Published
2022-11-28
Title
Popup Manager <= 1.6.6 - Unauthenticated Arbitrary Popup Deletion
Slug
popup-modal-for-youtube
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
popup-more
Published
2024-02-01
Title
Popup More < 2.2.5 - Admin+ Directory Traversal to Limited Local File Inclusion
Slug
popup-more
Published
2024-05-14
Title
Popup More Popups < 2.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
popup-seo-optimized
Published
2025-02-03
Title
Pop Up <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
popup-surveys
Published
2024-12-14
Title
Popup Surveys & Polls for WordPress (Mare.io) <= 1.36 - Missing Authorization
Slug
popup-with-fancybox
Published
2023-10-30
Title
Popup with fancybox < 3.6 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
popup-zyrex
Published
2023-04-04
Title
Zyrex Popup < 1.1 - Admin+ Arbitrary File Upload
Slug
popup4phone
Published
2024-04-26
Title
Popup4Phone <= 1.3.2 - Editor+ Stored XSS
Slug
popup4phone
Published
2024-04-26
Title
Popup4Phone <= 1.3.2 - Unauthenticated Stored XSS
Slug
popupally
Published
2024-01-30
Title
PopupAlly < 2.1.1 - Cross-Site Request Forgery via optin_submit_callback
Slug
popupally
Published
2024-04-25
Title
PopupAlly < 2.1.2 - Admin+ Stored XSS
Slug
popupally
Published
2024-05-20
Title
PopupAlly < 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
popups
Published
2022-07-05
Title
WordPress Popup <= 1.9.3.8 - Admin+ Stored Cross-Site Scripting
Slug
popups
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
porn-videos-embed
Published
2025-08-06
Title
Porn Videos Embed <= 0.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
porsline
Published
2024-10-31
Title
Porsline < 1.1 - Contributor+ SQL Injection
Slug
portable-phpmyadmin
Published
2014-08-01
Title
portable-phpMyAdmin < 1.3.1 - Authentication Bypass
Slug
portable-phpmyadmin
Published
2014-08-01
Title
Portable phpMyAdmin - /pma/phpinfo.php Direct Request System Information Disclosure
Slug
portable-phpmyadmin
Published
2014-08-01
Title
Portable phpMyAdmin 1.4.1 - Multiple Script Direct Request Authentication Bypass
Slug
portfolio
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)