WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
posturinn
Published
2025-01-06
Title
Pósturinn's Shipping with WooCommerce < 1.3.3 - Reflected XSS
Slug
power-forms-builder
Published
2024-12-14
Title
PowerFormBuilder <= 1.0.6 - Authenticated (Subscriber+) SQL Injection
Slug
power-ups-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
power-ups-for-elementor
Published
2025-01-24
Title
Power Ups for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
power-zoomer
Published
2014-08-01
Title
powerzoomer - Arbitrary File Upload
Slug
power-zoomer
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
powerkit
Published
2022-02-16
Title
Powerkit < 2.5.9 - Post Views Settings Update/Reset via CSRF
Slug
powerkit
Published
2024-04-05
Title
Powerkit – Supercharge your WordPress Site < 2.9.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
powerpack-addon-for-beaver-builder
Published
2022-01-12
Title
PowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scripting
Slug
powerpack-addon-for-beaver-builder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
powerpack-addon-for-beaver-builder
Published
2024-03-18
Title
PowerPack Lite for Beaver Builder < 1.3.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via element link
Slug
powerpack-addon-for-beaver-builder
Published
2024-06-28
Title
PowerPack Lite for Beaver Builder < 1.3.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
powerpack-addon-for-beaver-builder
Published
2024-06-28
Title
PowerPack Lite for Beaver Builder < 1.3.0.4 - Authenticated (Editor+) Local File Inclusion
Slug
powerpack-addon-for-beaver-builder
Published
2024-12-16
Title
PowerPack Lite for Beaver Builder < 1.3.1 - Reflected Cross-Site Scripting via Navigate Parameter
Slug
powerpack-elements
Published
2023-12-01
Title
PowerPack Pro for Elementor < 2.9.24 - Reflected Cross-Site Scripting
Slug
powerpack-elements
Published
2024-02-02
Title
PowerPack Pro for Elementor < 2.10.8 - Missing Authorization to Settings Reset
Slug
powerpack-elements
Published
2024-02-02
Title
PowerPack Pro for Elementor < 2.10.8 - Cross-Site Request Forgery to Plugin Settings Modification and Cross-Site Scripting
Slug
powerpack-elements
Published
2024-06-07
Title
PowerPack Pro for Elementor < 2.10.18 - Authenticated (Contributor+) Privilege Escalation
Slug
powerpack-elements
Published
2024-08-24
Title
PowerPack Pro for Elementor < 2.10.15 - Contributor+ Privilege Escalation
Slug
powerpack-elements
Published
2026-04-29
Title
PowerPack Pro for Elementor < v2.13.0 - Missing Authorization
Slug
powerpack-for-learndash
Published
2026-02-13
Title
Powerpack for LearnDash < 1.3.0 - Unauthenticated Arbitrary Option Update
Slug
powerpack-lite-for-elementor
Published
2021-04-13
Title
PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSS
Slug
powerpack-lite-for-elementor
Published
2021-12-06
Title
PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scripting
Slug
powerpack-lite-for-elementor
Published
2024-01-02
Title
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) < 2.7.14 - Settings Reset/Update via CSRF
Slug
powerpack-lite-for-elementor
Published
2024-02-06
Title
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) < 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting