WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
powerpress
Published
2020-10-11
Title
PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE
Slug
powerpress
Published
2023-04-11
Title
PowerPress < 10.0.2 - Contributor+ Stored Cross-Site Scripting
Slug
powerpress
Published
2023-04-17
Title
PowerPress Podcasting < 10.0.2 - Contributor+ Stored XSS
Slug
powerpress
Published
2023-09-25
Title
PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS
Slug
powerpress
Published
2023-08-29
Title
PowerPress Podcasting < 11.0.7 - Contributor+ SSRF
Slug
powerpress
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
powerpress
Published
2024-07-11
Title
PowerPress Podcasting plugin by Blubrry < 11.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter
Slug
powerpress
Published
2024-10-10
Title
Powerpress < 11.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode
Slug
powerpress
Published
2024-08-29
Title
PowerPress Podcasting < 11.9.18 - Author+ XSS
Slug
powerpress
Published
2025-03-24
Title
PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL
Slug
powerpress
Published
2025-04-09
Title
PowerPress Podcasting < 11.12.6 - Contributor+ Stored XSS
Slug
powerpress
Published
2025-04-09
Title
PowerPress Podcasting < 11.12.7 - Contributor+ SSRF
Slug
powerpress
Published
2025-04-23
Title
PowerPress Podcasting plugin by Blubrry < 11.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
powerpress
Published
2025-06-19
Title
PowerPress Podcasting < 11.13.12 - Contributor+ Server-Side Request Forgery
Slug
powerpress
Published
2025-10-21
Title
PowerPress Podcasting < 11.14 - Cross-Site Request Forgery
Slug
powerpress
Published
2025-11-26
Title
Blubrry PowerPress < 11.15.3 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'
Slug
powerpress
Published
2026-02-25
Title
PowerPress Podcasting plugin by Blubrry < 11.15.11 - Authenticated (Contributor+) PHP Object Injection
Slug
powerpress-multisite
Published
2025-04-03
Title
Blubrry PowerPress Podcasting plugin MultiSite add-on <= 0.1.1 - Reflected Cross-Site Scripting
Slug
powers-triggers-of-woo-to-chat
Published
2025-01-07
Title
Powerful Auto Chat <= 1.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
powies-uptime-robot
Published
2025-06-05
Title
Powie's Uptime Robot <= 0.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
powies-whois
Published
2020-07-09
Title
Powie's WHOIS Domain Check < 0.9.33 - Authenticated Stored Cross-Site Scripting
Slug
powr-pack
Published
2023-11-10
Title
POWR < 2.2.0 - Contributor+ Stored XSS
Slug
ppo-call-to-actions
Published
2025-01-20
Title
PPO Call To Actions <= 0.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ppv-live-webcams
Published
2025-02-03
Title
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams < 7.3.1 - Unauthenticated Arbitrary File Deletion
Slug
ppv-live-webcams
Published
2025-04-10
Title
Paid Videochat Turnkey Site < 7.3.12 - Authentication Bypass