WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
powerpack-lite-for-elementor
Published
2024-02-15
Title
PowerPack Addons for Elementor < 2.7.16 - Contributor+ Stored Cross-Site Scripting
Slug
powerpack-lite-for-elementor
Published
2024-03-29
Title
PowerPack Addons for Elementor < 2.7.19 - Contributor+ Stored XSS
Slug
powerpack-lite-for-elementor
Published
2024-03-29
Title
PowerPack Addons for Elementor < 2.7.18 - Contributor+ Stored XSS
Slug
powerpack-lite-for-elementor
Published
2024-05-29
Title
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) < 2.7.20 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
powerpack-lite-for-elementor
Published
2024-06-12
Title
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) < 2.7.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Widget
Slug
powerpack-lite-for-elementor
Published
2024-12-05
Title
PowerPack Elementor Addons (Free Widgets, Extensions and Templates) < 2.8.2 - Authenticated (Contributor+) Post Disclosure
Slug
powerpack-lite-for-elementor
Published
2025-03-31
Title
PowerPack Elementor Addons (Free Widgets, Extensions and Templates) < 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
powerpack-lite-for-elementor
Published
2025-09-09
Title
PowerPack Lite for Elementor < 2.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Via 'cursor_url'
Slug
powerpack-lite-for-elementor
Published
2026-03-01
Title
PowerPack Addons for Elementor < 2.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
powerpress
Published
2015-01-29
Title
PowerPress Podcasting < 6.0.1 - Cross-Site Scripting (XSS)
Slug
powerpress
Published
2015-09-14
Title
PowerPress Podcasting < 6.0.5 - Authenticated Cross-Site Scripting (XSS)
Slug
powerpress
Published
2020-10-11
Title
PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE
Slug
powerpress
Published
2023-04-11
Title
PowerPress < 10.0.2 - Contributor+ Stored Cross-Site Scripting
Slug
powerpress
Published
2023-04-17
Title
PowerPress Podcasting < 10.0.2 - Contributor+ Stored XSS
Slug
powerpress
Published
2023-09-25
Title
PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS
Slug
powerpress
Published
2023-08-29
Title
PowerPress Podcasting < 11.0.7 - Contributor+ SSRF
Slug
powerpress
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
powerpress
Published
2024-07-11
Title
PowerPress Podcasting plugin by Blubrry < 11.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter
Slug
powerpress
Published
2024-10-10
Title
Powerpress < 11.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode
Slug
powerpress
Published
2024-08-29
Title
PowerPress Podcasting < 11.9.18 - Author+ XSS
Slug
powerpress
Published
2025-03-24
Title
PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL
Slug
powerpress
Published
2025-04-09
Title
PowerPress Podcasting < 11.12.6 - Contributor+ Stored XSS
Slug
powerpress
Published
2025-04-09
Title
PowerPress Podcasting < 11.12.7 - Contributor+ SSRF
Slug
powerpress
Published
2025-04-23
Title
PowerPress Podcasting plugin by Blubrry < 11.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
powerpress
Published
2025-06-19
Title
PowerPress Podcasting < 11.13.12 - Contributor+ Server-Side Request Forgery