WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
profit-products-tables-for-woocommerce
Published
2025-05-19
Title
Active Products Tables for WooCommerce < 1.0.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
profit-products-tables-for-woocommerce
Published
2026-03-10
Title
Active Products Tables for WooCommerce. Use constructor to create tables  < 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
profit-products-tables-for-woocommerce
Published
2026-05-19
Title
Active Products Tables for WooCommerce. Use constructor to create tables  < 1.0.9 - Unauthenticated SQL Injection
Slug
profit-products-tables-for-woocommerce
Published
2026-06-01
Title
Active Products Tables for WooCommerce. Use constructor to create tables  < 1.1.0 - Unauthenticated SQL Injection
Slug
profitori
Published
2025-05-30
Title
Profitori 2.0.6.0 - 2.1.1.3 - Unauthenticated Privilege Escalation
Slug
profitori
Published
2025-07-11
Title
The E-Commerce ERP <= 2.1.1.3 - Unauthenticated Privilege Escalation
Slug
profitori
Published
2025-07-21
Title
The E-Commerce ERP <= 2.1.1.3 - Missing Authorization
Slug
progress-bar
Published
2023-04-24
Title
Progress Bar < 2.2.2 - Contributor+ Stored XSS
Slug
progress-bar
Published
2025-05-07
Title
Progress Bar < 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
progress-planner
Published
2024-06-27
Title
Progress Planner < 0.9.2 - Missing Authorization
Slug
progress-planner
Published
2024-06-27
Title
Progress Planner < 0.9.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
progress-planner
Published
2025-10-06
Title
Progress Planner < 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
progress-planner
Published
2026-06-02
Title
Progress Planner < 1.9.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
progress-tracker
Published
2025-01-16
Title
Progress Tracker <= 0.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
progressive-license
Published
2022-07-07
Title
Progressive License <= 1.1.0 - CSRF to Stored XSS
Slug
progressive-wp
Published
2024-04-29
Title
Progressive WordPress (PWA) <= 2.1.13 - Missing Authorization
Slug
progressmatify-blocks
Published
2025-11-10
Title
Progress Bar Blocks for Gutenberg <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Slug
project-app
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
project-cost-calculator
Published
2025-08-11
Title
Project Cost Calculator <= 1.0.0 - Missing Authorization
Slug
project-honey-pot-spam-trap
Published
2025-11-17
Title
Project Honey Pot Spam Trap <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
project-notebooks
Published
2025-06-27
Title
PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via wpnb_pto_new_users_add Function
Slug
project-panorama-lite
Published
2023-04-18
Title
Panorama - WordPress Project Management < 1.5.1 - Admin+ Stored XSS
Slug
project-panorama-lite
Published
2024-11-26
Title
Panorama – WordPress Project Management Plugin <= 1.5.1 - Admin+ Stored XSS
Slug
project-source-code-download
Published
2022-07-11
Title
Project Source Code Download <= 1.0.0 - Unauthenticated Backup Download
Slug
project-status
Published
2021-07-24
Title
Project Status <= 1.6 - Reflected Cross-Site Scripting (XSS)