WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
premium-addons-for-elementor
Published
2025-07-03
Title
Premium Addons for Elementor < 4.10.70 - Contributor+ Stored XSS
Slug
premium-addons-for-elementor
Published
2025-12-22
Title
Premium Addons for Elementor < 4.11.54 - Unauthenticated Sensitive Information Exposure
Slug
premium-addons-for-elementor
Published
2025-12-22
Title
Premium Addons for Elementor < 4.11.54 - Arbitrary Template Creation via CSRF
Slug
premium-addons-for-elementor
Published
2025-12-04
Title
Premium Addons for Elementor < 4.11.54 - Unauthenticated Information Exposure
Slug
premium-addons-for-elementor
Published
2026-01-17
Title
Premium Addons for Elementor < 4.11.64 - Subscriber+ Settings Update
Slug
premium-addons-for-elementor
Published
2026-05-01
Title
Premium Addons for Elementor < 4.11.71 - Contributor+ Stored XSS via 'custom_svg' Parameter
Slug
premium-addons-for-kingcomposer
Published
2025-08-11
Title
Premium Addons for KingComposer <= 1.1.1 - Unauthenticated Local File Inclusion
Slug
premium-addons-pro
Published
2023-06-02
Title
Premium Addons PRO < 2.8.25 - Reflected XSS
Slug
premium-addons-pro
Published
2024-03-06
Title
Premium Addons for Elementor PRO < 2.9.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link
Slug
premium-addons-pro
Published
2024-03-07
Title
Premium Addons PRO < 2.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module
Slug
premium-addons-pro
Published
2024-03-07
Title
Premium Addons PRO < 2.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module
Slug
premium-addons-pro
Published
2024-03-07
Title
Premium Addons PRO < 2.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget
Slug
premium-addons-pro
Published
2024-03-07
Title
Premium Addons PRO < 2.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module
Slug
premium-addons-pro
Published
2024-03-07
Title
Premium Addons PRO < 2.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget
Slug
premium-addons-pro
Published
2024-03-14
Title
Premium Addons for Elementor (Free < 4.10.24, Pro < 2.9.14) - Contributor+ Stored XSS
Slug
premium-blocks-for-gutenberg
Published
2024-07-05
Title
Premium Blocks – Gutenberg Blocks for WordPress < 2.1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
premium-blocks-for-gutenberg
Published
2024-09-30
Title
Premium Blocks – Gutenberg Blocks for WordPress < 2.1.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
premium-blocks-for-gutenberg
Published
2024-12-30
Title
Premium Blocks – Gutenberg Blocks for WordPress < 2.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
premium-blog-addons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
premium-seo-pack
Published
2015-04-24
Title
Premium SEO Pack 1.8.0 - Unauthenicated Arbitrary File Upload & LFD
Slug
premium-seo-pack
Published
2024-08-28
Title
Premium SEO Pack – WP SEO Plugin <= 1.6.002 - Unauthenticated Information Exposure
Slug
premium-seo-pack
Published
2024-10-24
Title
Premium SEO Pack < 1.6.002 - Authenticated (Contributor+) SQL Injection
Slug
premium-seo-pack
Published
2025-07-08
Title
Premium SEO Pack <= 3.3.2 - Authenticated (Subscriber+) SQL Injection
Slug
premmerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
premmerce
Published
2023-07-17
Title
Premmerce < 1.3.17 - Cross-Site Request Forgery