WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
post-block
Published
2024-07-10
Title
FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor < 5.3.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
post-block
Published
2025-01-06
Title
FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor < 6.0.1 - Missing Authorization to Authenticated (Subscriber+) Shortcode Export
Slug
post-block
Published
2025-04-01
Title
FancyPost <= 6.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-by-email
Published
2024-11-18
Title
Post By Email <= 1.0.4b - Reflected Cross-Site Scripting
Slug
post-by-email
Published
2025-09-29
Title
Post By Email <= 1.0.4b - Unauthenticated Arbitrary File Upload via Email Attachments
Slug
post-carousel
Published
2021-08-16
Title
Post Carousel < 2.3.5 - CSRF Bypass / Unauthorised AJAX Calls
Slug
post-carousel
Published
2023-01-06
Title
Post Grid, Post Carousel, & List Category Posts < 2.4.19 - Contributor+ Stored XSS
Slug
post-carousel
Published
2024-04-04
Title
Post Grid, Post Carousel, & List Category Posts < 2.4.28 - Editor+ Stored XSS
Slug
post-carousel
Published
2024-07-17
Title
Smart Post Show <= 3.0.0 - Editor+ Stored XSS
Slug
post-carousel-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
post-carousel-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
post-carousel-slider
Published
2025-01-27
Title
Post Carousel Slider <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
post-carousel-slider-for-elementor
Published
2024-11-28
Title
Post Carousel Slider for Elementor < 1.6.0 - Contributor+ Stored XSS
Slug
post-carousel-slider-for-elementor
Published
2025-06-25
Title
Post Carousel Slider for Elementor < 1.7.0 - Authenticated (Subscriber+) Missing Authorization via process_wbelps_promo_form Function
Slug
post-carousel-slider-for-elementor
Published
2025-09-22
Title
Post Carousel Slider for Elementor <= 1.7.0 - Missing Authorization
Slug
post-category-image-with-grid-and-slider
Published
2023-01-10
Title
Post Category Image With Grid and Slider < 1.4.8 - Contributor+ Stored XSS via Shortcode
Slug
post-cloner
Published
2025-12-05
Title
Post Cloner <= 1.0.0 - Missing Authorization
Slug
post-connector
Published
2015-04-20
Title
Post Connector < 1.0.4 - XSS
Slug
post-connector
Published
2023-07-20
Title
Post Connector < 1.0.10 - Admin+ Stored Cross-Site Scripting
Slug
post-connector
Published
2025-08-06
Title
Post Connector <= 1.0.11 - Reflected Cross-Site Scripting
Slug
post-content-xmlrpc
Published
2021-10-07
Title
Post Content XMLRPC <= 1.0 - Admin+ SQL Injections
Slug
post-custom-templates-lite
Published
2025-04-01
Title
Post Custom Templates Lite <= 1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-custom-templates-lite
Published
2025-06-05
Title
Post Custom Templates Lite <= 1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
post-duplicator
Published
2016-04-06
Title
Post Duplicator <= 2.16 - Cross-Site Scripting (XSS)
Slug
post-duplicator
Published
2021-12-02
Title
Post Duplicator < 2.27 - Admin+ Stored Cross-Site Scripting