WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
prdctfltr
Published
2026-02-05
Title
Product Filter for WooCommerce <= 9.1.2 - Shop Manager+ Privilege Escalation
Slug
pre-orders-for-woocommerce
Published
2023-10-26
Title
Pre-Orders for WooCommerce < 1.2.14 - Contributor+ Stored XSS
Slug
pre-party-browser-hints
Published
2023-12-21
Title
Pre* Party Resource Hints < 1.8.20 - Admin+ SQLi
Slug
pre-party-browser-hints
Published
2026-03-20
Title
Pre* Party Resource Hints <= 1.8.20 - Authenticated (Subscriber+) SQL Injection via 'hint_ids' Parameter
Slug
pre-publish-checklist
Published
2023-09-22
Title
Pre-Publish Checklist < 1.1.2 - Insecure Direct Object Reference to Arbitrary Post '_ppc_meta_key' Update
Slug
pre-publish-post-checklist
Published
2025-06-27
Title
Pre-Publish Post Checklist <= 3.1 - Missing Authorization
Slug
precious-metals-automated-product-pricing-pro
Published
2026-03-01
Title
Precious Metals Automated Product Pricing – Pro <= 4.0.5 - Missing Authorization
Slug
precious-metals-chart-and-widgets
Published
2025-01-23
Title
Precious Metals Charts and Widgets for WordPress < 1.2.9 - Authenticated (Contributor+) Stored Cross-site Scripting
Slug
precise-columns
Published
2025-11-10
Title
Precise Columns <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
predict-when
Published
2025-01-16
Title
Predict When <= 1.3 - Reflected Cross-Site Scripting
Slug
preferred-languages
Published
2024-05-30
Title
Preferred Languages < 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
preload-current-images
Published
2025-11-10
Title
Preload Current Images <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
preloader-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
preloader-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
preloader-for-website
Published
2023-11-21
Title
Preloader for Website < 1.3 - Missing Authorization via plwao_register_settings()
Slug
preloader-plus
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
preloader-plus
Published
2024-09-06
Title
Preloader Plus – WordPress Loading Screen Plugin <= 2.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
preloader-quotes
Published
2025-01-16
Title
Preloader Quotes <= 1.0.0 - Reflected Cross-Site Scripting
Slug
preloader-sws
Published
2024-12-17
Title
Preloader by WordPress Monsters <= 1.2.3 - Reflected Cross-Site Scripting
Slug
premium-addons-for-elementor
Published
2021-04-13
Title
Premium Addons for Elementor < 4.2.8 - Contributor+ Stored Cross-Site Scripting (XSS)
Slug
premium-addons-for-elementor
Published
2021-08-30
Title
Premium Addons for Elementor < 4.5.2 - Subscriber+ Arbitrary Blog Option Update
Slug
premium-addons-for-elementor
Published
2024-02-02
Title
Premium Addons for Elementor < 4.10.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
premium-addons-for-elementor
Published
2024-02-14
Title
Premium Addons for Elementor < 4.10.19 - Contributor+ Stored Cross-Site Scripting
Slug
premium-addons-for-elementor
Published
2024-02-14
Title
Premium Addons for Elementor < 4.10.19 - Contributor+ Stored Cross-Site Scripting
Slug
premium-addons-for-elementor
Published
2024-02-28
Title
Premium Addons for Elementor < 4.10.22 - Contributor+ Stored XSS