WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
powerpack-elements
Published
2026-04-29
Title
PowerPack Pro for Elementor < v2.13.0 - Missing Authorization
Slug
powerpack-for-learndash
Published
2026-02-13
Title
Powerpack for LearnDash < 1.3.0 - Unauthenticated Arbitrary Option Update
Slug
powerpack-lite-for-elementor
Published
2021-04-13
Title
PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSS
Slug
powerpack-lite-for-elementor
Published
2021-12-06
Title
PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scripting
Slug
powerpack-lite-for-elementor
Published
2024-01-02
Title
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) < 2.7.14 - Settings Reset/Update via CSRF
Slug
powerpack-lite-for-elementor
Published
2024-02-06
Title
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) < 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
powerpack-lite-for-elementor
Published
2024-02-15
Title
PowerPack Addons for Elementor < 2.7.16 - Contributor+ Stored Cross-Site Scripting
Slug
powerpack-lite-for-elementor
Published
2024-03-29
Title
PowerPack Addons for Elementor < 2.7.19 - Contributor+ Stored XSS
Slug
powerpack-lite-for-elementor
Published
2024-03-29
Title
PowerPack Addons for Elementor < 2.7.18 - Contributor+ Stored XSS
Slug
powerpack-lite-for-elementor
Published
2024-05-29
Title
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) < 2.7.20 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
powerpack-lite-for-elementor
Published
2024-06-12
Title
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) < 2.7.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Effects Widget
Slug
powerpack-lite-for-elementor
Published
2024-12-05
Title
PowerPack Elementor Addons (Free Widgets, Extensions and Templates) < 2.8.2 - Authenticated (Contributor+) Post Disclosure
Slug
powerpack-lite-for-elementor
Published
2025-03-31
Title
PowerPack Elementor Addons (Free Widgets, Extensions and Templates) < 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
powerpack-lite-for-elementor
Published
2025-09-09
Title
PowerPack Lite for Elementor < 2.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Via 'cursor_url'
Slug
powerpack-lite-for-elementor
Published
2026-03-01
Title
PowerPack Addons for Elementor < 2.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
powerpress
Published
2015-01-29
Title
PowerPress Podcasting < 6.0.1 - Cross-Site Scripting (XSS)
Slug
powerpress
Published
2015-09-14
Title
PowerPress Podcasting < 6.0.5 - Authenticated Cross-Site Scripting (XSS)
Slug
powerpress
Published
2020-10-11
Title
PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE
Slug
powerpress
Published
2023-04-11
Title
PowerPress < 10.0.2 - Contributor+ Stored Cross-Site Scripting
Slug
powerpress
Published
2023-04-17
Title
PowerPress Podcasting < 10.0.2 - Contributor+ Stored XSS
Slug
powerpress
Published
2023-09-25
Title
PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS
Slug
powerpress
Published
2023-08-29
Title
PowerPress Podcasting < 11.0.7 - Contributor+ SSRF
Slug
powerpress
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
powerpress
Published
2024-07-11
Title
PowerPress Podcasting plugin by Blubrry < 11.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter
Slug
powerpress
Published
2024-10-10
Title
Powerpress < 11.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode