WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
premium-addons-pro
Published
2023-06-02
Title
Premium Addons PRO < 2.8.25 - Reflected XSS
Slug
premium-addons-pro
Published
2024-03-06
Title
Premium Addons for Elementor PRO < 2.9.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget link
Slug
premium-addons-pro
Published
2024-03-07
Title
Premium Addons PRO < 2.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module
Slug
premium-addons-pro
Published
2024-03-07
Title
Premium Addons PRO < 2.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Global Badge Module
Slug
premium-addons-pro
Published
2024-03-07
Title
Premium Addons PRO < 2.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Messenger Chat Widget
Slug
premium-addons-pro
Published
2024-03-07
Title
Premium Addons PRO < 2.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Mouse Cursor Module
Slug
premium-addons-pro
Published
2024-03-07
Title
Premium Addons PRO < 2.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multi Scroll Widget
Slug
premium-addons-pro
Published
2024-03-14
Title
Premium Addons for Elementor (Free < 4.10.24, Pro < 2.9.14) - Contributor+ Stored XSS
Slug
premium-blocks-for-gutenberg
Published
2024-07-05
Title
Premium Blocks – Gutenberg Blocks for WordPress < 2.1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
premium-blocks-for-gutenberg
Published
2024-09-30
Title
Premium Blocks – Gutenberg Blocks for WordPress < 2.1.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
premium-blocks-for-gutenberg
Published
2024-12-30
Title
Premium Blocks – Gutenberg Blocks for WordPress < 2.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
premium-blog-addons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
premium-seo-pack
Published
2015-04-24
Title
Premium SEO Pack 1.8.0 - Unauthenicated Arbitrary File Upload & LFD
Slug
premium-seo-pack
Published
2024-08-28
Title
Premium SEO Pack – WP SEO Plugin <= 1.6.002 - Unauthenticated Information Exposure
Slug
premium-seo-pack
Published
2024-10-24
Title
Premium SEO Pack < 1.6.002 - Authenticated (Contributor+) SQL Injection
Slug
premium-seo-pack
Published
2025-07-08
Title
Premium SEO Pack <= 3.3.2 - Authenticated (Subscriber+) SQL Injection
Slug
premmerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
premmerce
Published
2023-07-17
Title
Premmerce < 1.3.17 - Cross-Site Request Forgery
Slug
premmerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
premmerce
Published
2025-07-02
Title
Premmerce < 1.3.20 - Unauthenticated Local File Inclusion
Slug
premmerce
Published
2025-05-10
Title
Premmerce < 1.3.20 - Cross-Site Request Forgery
Slug
premmerce
Published
2026-02-06
Title
Premmerce < 1.3.21 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint
Slug
premmerce-dev-tools
Published
2026-06-15
Title
Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin Creation
Slug
premmerce-redirect-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
premmerce-redirect-manager
Published
2023-03-30
Title
Premmerce Redirect Manager < 1.0.11 - Cross-Site Request Forgery