WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pretty-link
Published
2012-05-15
Title
Pretty Link Lite <= 1.5.3 - Cross-Site Scripting (XSS)
Slug
pretty-link
Published
2014-08-01
Title
Pretty Link Lite <= 1.6.0 - Cross-Site Scripting (XSS)
Slug
pretty-link
Published
2014-08-01
Title
Pretty Link Lite <= 1.6.2 - XSS in SWF
Slug
pretty-link
Published
2015-07-08
Title
Pretty Link Lite <= 1.6.7 - Authenticated SQL Injection
Slug
pretty-link
Published
2019-06-19
Title
Shortlinks by Pretty Links <= 2.1.9 - Stored XSS and CSV Injection
Slug
pretty-link
Published
2023-04-13
Title
Shortlinks by Pretty Links < 3.4.1 - Link Visit Stats Clear via CSRF
Slug
pretty-link
Published
2024-03-22
Title
Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing < 3.6.4 - Plugin Settings Update via CSRF
Slug
pretty-link
Published
2024-03-25
Title
Shortlinks by Pretty Links < 3.6.3 - Reflected Cross-Site Scripting via post_status
Slug
pretty-link
Published
2025-05-19
Title
Shortlinks by Pretty Links < 3.6.16 - Missing Authorization
Slug
pretty-opt-in-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
pretty-simple-popup-builder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pretty-simple-popup-builder
Published
2024-07-22
Title
Pretty Simple Popup Builder < 1.0.10 - Admin+ Stored XSS
Slug
pretty-simple-popup-builder
Published
2025-01-03
Title
Pretty Simple Popup Builder < 1.0.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
pretty-url
Published
2023-04-18
Title
Pretty Url < 1.5.5 - Admin+ Stored XSS
Slug
pretty-url
Published
2025-01-07
Title
Pretty Url <= 1.5.5 - Cross-Site Request Forgery
Slug
pretty-url
Published
2025-01-07
Title
Pretty Url < 1.5.5 - Reflected XSS
Slug
prettyphoto
Published
2015-05-05
Title
WordPress prettyPhoto <= 1.1 - DOM Cross-Site Scripting (XSS)
Slug
prettyphoto
Published
2024-06-05
Title
WordPress prettyPhoto <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
Slug
prettyphoto
Published
2025-09-05
Title
prettyPhoto <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
prevent-content-copy-image-save
Published
2021-04-12
Title
Content Copy Protection & Prevent Image Save <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)
Slug
prevent-direct-access
Published
2025-04-24
Title
Prevent Direct Access 2.8.6 - 2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions
Slug
prevent-direct-access
Published
2025-04-24
Title
Prevent Direct Access – Protect WordPress Files < 2.8.8.1 - Unauthenticated Sensitive Information Exposure
Slug
prevent-file-access
Published
2023-08-28
Title
Prevent files / folders access < 2.5.2 - Admin+ Arbitrary File Upload
Slug
prevent-file-access
Published
2025-08-06
Title
Prevent files / folders access < 2.6.1 - Authenticated (Subscriber+) Path Traversal
Slug
prevent-landscape-rotation
Published
2023-11-28
Title
Prevent Landscape Rotation < 2.1 - Settings Update via CSRF