WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pagerestrict
Published
2015-08-25
Title
Page Restrict <= 2.2.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
pagerestrict
Published
2024-01-31
Title
Page Restrict <= 2.5.5 - Cross-Site Request Forgery via pr_admin_page
Slug
pagerestrict
Published
2024-02-27
Title
Page Restrict <= 2.5.5 - Unauthenticated Protected Post Access
Slug
pages-order
Published
2025-04-01
Title
Pages Order <= 1.1.3 - Reflected Cross-Site Scripting
Slug
pagination
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
pagination
Published
2023-03-27
Title
Pagination by BestWebSoft < 1.2.3 - Admin+ Stored XSS
Slug
pago-redsys-tpv-grafreak
Published
2025-02-21
Title
Pago por Redsys < 1.0.13 - Reflected Cross-Site Scripting
Slug
pagopar-woocommerce-gateway
Published
2025-04-09
Title
Pagopar – WooCommerce Gateway < 2.8.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
paid-business-listings
Published
2014-08-01
Title
Paid Business Listings - Blind SQL Injection
Slug
paid-downloads
Published
2014-08-01
Title
Paid Downloads < 2.21 - SQL Injection
Slug
paid-downloads
Published
2026-01-21
Title
Paid Downloads <= 3.15 - Unauthenticated SQL Injection
Slug
paid-member-subscriptions
Published
2021-07-26
Title
Paid Member Subscriptions < 2.4.2 - Reflected Cross-Site Scripting (XSS)
Slug
paid-member-subscriptions
Published
2021-08-06
Title
Paid Member Subscriptions < 2.4.2 - Authenticated SQL Injection
Slug
paid-member-subscriptions
Published
2023-12-27
Title
Paid Member Subscriptions < 2.10.5 - Cross-Site Request Forgery via ajax_add_log_entry
Slug
paid-member-subscriptions
Published
2024-02-13
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.11.2 - Missing Authorization via creating_pricing_table_page
Slug
paid-member-subscriptions
Published
2024-02-13
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.11.2 - Missing Authorization via pms_stripe_connect_handle_authorization_return
Slug
paid-member-subscriptions
Published
2024-04-22
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.11.1 - Cross-Site Request Forgery to Notice Dismissal
Slug
paid-member-subscriptions
Published
2024-10-01
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.12.9 - Reflected Cross-Site Scripting
Slug
paid-member-subscriptions
Published
2024-11-08
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.13.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
paid-member-subscriptions
Published
2024-12-17
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.13.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
paid-member-subscriptions
Published
2025-01-13
Title
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction < 2.13.8 - Authentication Bypass via pms_payment_id
Slug
paid-member-subscriptions
Published
2025-03-28
Title
Paid Member Subscriptions < 2.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
paid-member-subscriptions
Published
2025-07-03
Title
Paid Member Subscriptions < 2.15.2 - Unauthenticated SQL Injection
Slug
paid-member-subscriptions
Published
2025-07-29
Title
Paid Membership Subscriptions < 2.15.5 - Unauthenticated Local File Inclusion
Slug
paid-member-subscriptions
Published
2025-09-03
Title
Paid Member Subscriptions < 2.16.0 - Missing Authorization