WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
preview-link-generator
Published
2023-02-28
Title
Preview Link Generator < 1.0.4 - Arbitrary Plugin Activation via CSRF
Slug
prezi-embedder
Published
2025-02-13
Title
Prezi Embedder <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
price-alert-woocommerce
Published
2024-11-18
Title
WooCommerce Price Alert <= 1.0.4 - Reflected Cross-Site Scripting
Slug
price-bands-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
price-bands-for-woocommerce
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
price-bands-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
price-calc
Published
2025-03-11
Title
price-calc <= 0.6.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
price-calculator-to-your-website
Published
2024-10-31
Title
Website price calculator <= 4.1 - Authenticated (Contributor+) SQL Injection
Slug
price-commander-xforwc
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
pricer-ninja-pricing-tables
Published
2024-10-30
Title
Pricer Ninja <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pricetable
Published
2022-01-27
Title
Price Table <= 0.2.2 - Contributor+ Stored Cross-Site Scripting
Slug
pricing-deals-for-woocommerce
Published
2022-06-16
Title
Pricing Deals for WooCommerce < 2.0.3 - Unauthenticated SQLi
Slug
pricing-deals-for-woocommerce
Published
2023-08-29
Title
Pricing Deals for WooCommerce <= 2.0.3.2 - Missing Authorization via vtprd_ajax_clone_rule
Slug
pricing-table
Published
2022-04-05
Title
Pricing Table <= 1.5.2 - Author+ Stored Cross-Site Scripting
Slug
pricing-table-addon-for-elementor
Published
2024-11-20
Title
Pricing table addon for elementor <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Slug
pricing-table-by-supsystic
Published
2020-02-25
Title
Pricing Table by Supsystic < 1.8.1 - Cross-Site Request Forgery to XSS and Setting Changes
Slug
pricing-table-by-supsystic
Published
2020-02-25
Title
Pricing Table by Supsystic < 1.8.2 - Insecure Permissions on AJAX Actions
Slug
pricing-table-by-supsystic
Published
2020-02-25
Title
Pricing Table by Supsystic < 1.8.2 - Unauthenticated Stored XSS
Slug
pricing-table-by-supsystic
Published
2021-02-08
Title
Pricing Table by Supsystic < 1.9.0 - Authenticated Stored Cross-Site Scripting
Slug
pricing-table-by-supsystic
Published
2021-02-08
Title
Pricing Table by Supsystic < 1.8.9 - Authenticated SQL Injections
Slug
pricing-table-by-supsystic
Published
2021-06-22
Title
Pricing Table by Supsystic < 1.9.5 - Reflected Cross-Site Scripting
Slug
pricing-table-by-supsystic
Published
2024-04-22
Title
Pricing Table by Supsystic < 1.9.13 - Admin+ Content Injection
Slug
pricing-tables-for-visual-composer
Published
2024-11-26
Title
Pricing Tables For WPBakery Page Builder (formerly Visual Composer) <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via wdo_pricing_tables Shortcode
Slug
pricing-tables-for-wpbakery-page-builder
Published
2023-03-22
Title
Pricing Tables For WPBakery Page Builder < 3.0 - Subscriber+ LFI
Slug
pricing-tables-for-wpbakery-page-builder
Published
2023-03-22
Title
Pricing Tables For WPBakery Page Builder < 3.0 - Contributor+ Stored XSS