WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
portfolio-elementor
Published
2025-09-22
Title
PowerFolio < 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
portfolio-filter-gallery
Published
2020-01-29
Title
Portfolio Filter Gallery < 1.1.3 - CSRF & Reflected XSS
Slug
portfolio-filter-gallery
Published
2024-03-25
Title
Portfolio Gallery – Image Gallery Plugin < 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
portfolio-filter-gallery
Published
2024-06-26
Title
Portfolio Gallery – Image Gallery Plugin < 1.6.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
portfolio-gallery
Published
2015-08-24
Title
Portfolio Gallery < 1.5.9 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
portfolio-gallery
Published
2016-10-04
Title
Portfolio <= 2.1.10 - Reflected Cross-Site Scripting (XSS)
Slug
portfolio-gallery
Published
2014-09-19
Title
Portfolio Gallery < 1.1.9 - SQL Injection
Slug
portfolio-manager-powered-by-behance
Published
2025-04-04
Title
Behance Portfolio Manager < 1.8.0 - Authenticated (Administrator+) SQL Injection
Slug
portfolio-manager-powered-by-behance
Published
2025-03-31
Title
Behance Portfolio Manager < 1.8.0 - Authenticated (Contributor+) SQL Injection
Slug
portfolio-manager-powered-by-behance
Published
2025-06-05
Title
Behance Portfolio Manager <= 1.7.4 - Missing Authorization
Slug
portfolio-manager-powered-by-behance
Published
2025-09-22
Title
Behance Portfolio Manager < 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
portfolio-manager-powered-by-behance
Published
2025-12-31
Title
Behance Portfolio Manager < 1.8.0 - Cross-Site Request Forgery
Slug
portfolio-manager-powered-by-behance
Published
2025-12-31
Title
Behance Portfolio Manager < 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
portfolio-pro
Published
2024-12-16
Title
Portfolio – Filterable Masonry Portfolio Gallery for Professionals <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
portfolio-responsive-gallery
Published
2021-06-29
Title
Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL Injections
Slug
portfolio-responsive-gallery
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Slug
portfolio-slideshow
Published
2023-02-17
Title
Portfolio Slideshow <= 1.13.0 - Contributor+ XSS
Slug
portfolio-slideshow-pro
Published
2014-08-01
Title
portfolio-slideshow-pro v3 - SQL Injection
Slug
portfolio-wp
Published
2022-03-15
Title
GridKit Portfolio < 2.1.0 - Subscriber+ Stored Cross-Site Scripting
Slug
portfolio-wp
Published
2025-11-19
Title
Multiple Plugins and Themes - Contributor+ DOM-Based Stored XSS via lightGallery Library
Slug
portfolleo
Published
2024-10-21
Title
Portfolleo <= 1.2 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
porto-functionality
Published
2023-11-23
Title
Porto Theme - Functionality < 2.12.1 - Missing Authorization
Slug
porto-functionality
Published
2023-11-23
Title
Porto Theme - Functionality < 2.12.1 - Unauthenticated SQL Injection
Slug
porto-functionality
Published
2024-05-08
Title
Porto Theme - Functionality < 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Post Meta
Slug
porto-functionality
Published
2024-05-08
Title
Porto Theme - Functionality < 3.1.1 - Authenticated (Contributor+) Local File Inclusion via Shortcode