WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
posts-for-page
Published
2025-04-25
Title
Posts for Page <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posts-in-page
Published
2017-02-15
Title
Posts In Page < 1.3.0 - Directory Traversal
Slug
posts-navigation-links-for-sections-and-headings-free-by-wp-masters
Published
2025-11-03
Title
Posts Navigation Links for Sections and Headings - Free by WP Masters <= 1.0.1 - Cross-Site Request Forgery to Settings Update
Slug
posts-per-cat
Published
2025-05-15
Title
Posts per Cat [Unmaintained] < 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posts-reminder
Published
2024-08-27
Title
Posts reminder <= 0.20 - Settings Update via CSRF
Slug
posts-search
Published
2024-11-08
Title
Posts Search <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posts-slider-shortcode
Published
2025-07-04
Title
Posts Slider Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posts-table-filterable
Published
2021-10-18
Title
TableOn < 1.0.1 - Reflected Cross-Site Scripting
Slug
posts-table-filterable
Published
2025-04-04
Title
TableOn – WordPress Posts Table Filterable <= 1.0.4 - Missing Authorization
Slug
posts-table-filterable
Published
2025-04-10
Title
TableOn – WordPress Posts Table Filterable < 1.0.4.4 - Unauthenticated PHP Object Injection
Slug
posts-table-filterable
Published
2025-04-14
Title
TableOn – WordPress Posts Table Filterable < 1.0.4 - Unauthenticated Stored Cross-Site Scripting
Slug
posts-table-filterable
Published
2025-06-20
Title
TableOn – WordPress Posts Table Filterable < 1.0.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode
Slug
posts-table-filterable
Published
2025-05-22
Title
TableOn <= 1.0.4.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
posts-table-filterable
Published
2026-01-20
Title
TableOn < 1.0.4.3 - Reflected Cross-Site Scripting
Slug
posts-to-page
Published
2024-01-03
Title
Posts to Page <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
posttabs
Published
2022-05-23
Title
postTabs <= 2.10.6 - Arbitrary Settings Update via CSRF to Stored XSS
Slug
posturinn
Published
2025-01-06
Title
Pósturinn's Shipping with WooCommerce < 1.3.3 - Reflected XSS
Slug
power-forms-builder
Published
2024-12-14
Title
PowerFormBuilder <= 1.0.6 - Authenticated (Subscriber+) SQL Injection
Slug
power-ups-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
power-ups-for-elementor
Published
2025-01-24
Title
Power Ups for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
power-zoomer
Published
2014-08-01
Title
powerzoomer - Arbitrary File Upload
Slug
power-zoomer
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
powerkit
Published
2022-02-16
Title
Powerkit < 2.5.9 - Post Views Settings Update/Reset via CSRF
Slug
powerkit
Published
2024-04-05
Title
Powerkit – Supercharge your WordPress Site < 2.9.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
powerpack-addon-for-beaver-builder
Published
2022-01-12
Title
PowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scripting