WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
push-notification-for-post-and-buddypress
Published
2025-01-10
Title
Push Notification for Post and BuddyPress < 2.08 - Reflected Cross-Site Scripting
Slug
push-notification-for-post-and-buddypress
Published
2025-01-16
Title
Push Notification for Post and BuddyPress < 2.12 - Missing Authorization to Unauthenticated Settings Update
Slug
push-notification-for-wp-by-pushassist
Published
2023-04-24
Title
PushAssist <= 3.0.8 - Reflected Cross-Site Scripting
Slug
push-notification-for-wp-by-pushassist
Published
2024-11-13
Title
Push Notifications for WordPress by PushAssist <= 3.0.8 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
push-notification-mobile-and-web-app
Published
2025-05-16
Title
Push notification for Mobile and Web app < 2.0.4 - Missing Authorization
Slug
push-notifications-for-wp
Published
2021-11-16
Title
Push Notifications for WordPress (Lite) < 6.0.1 - Settings Update via CSRF
Slug
pushbiz
Published
2025-02-04
Title
Pushbiz <= 1.0 - Reflected XSS
Slug
pushe-webpush
Published
2025-09-05
Title
Pushe Web Push Notification <= 0.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
puzzleme
Published
2025-09-03
Title
PuzzleMe for WordPress < 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pvn-auth-popup
Published
2024-06-05
Title
PVN Auth Popup <= 1.0.0 - Admin+ Stored XSS
Slug
pvn-auth-popup
Published
2024-06-05
Title
PVN Auth Popup <= 1.0.0 - Contributor+ XSS via Shortcode
Slug
pw-bulk-edit
Published
2025-05-07
Title
PW WooCommerce Bulk Edit < 2.135 - Cross-Site Request Forgery
Slug
pw-woocommerce-on-sale
Published
2025-07-07
Title
PW WooCommerce On Sale! < 1.40 - Missing Authorization
Slug
pwa-for-wp
Published
2019-03-25
Title
PWA for WP <= 1.0.8 - XSS
Slug
pwa-for-wp
Published
2021-07-01
Title
PWA for WP & AMP < 1.7.33 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
pwa-for-wp
Published
2021-07-01
Title
PWA for WP & AMP < 1.7.33 - Authenticated (Subscriber+) Settings Change
Slug
pwa-for-wp
Published
2024-07-03
Title
PWA For WP & AMP < 1.7.72 Administrator+ Stored XSS
Slug
pwa-for-wp
Published
2024-09-25
Title
PWA for WP & AMP < 1.7.73 - Missing Authorization
Slug
pwgrandom
Published
2014-12-09
Title
PWG R&om <= 1.11 - CSRF & XSS
Slug
pz-frontend-manager
Published
2024-07-01
Title
pz-frontend-manager < 1.0.6 - CSRF change user profile picture
Slug
pz-linkcard
Published
2022-03-01
Title
Pz-LinkCard < 2.4.5.3 - Reflected Cross-Site Scripting
Slug
pz-linkcard
Published
2023-11-14
Title
Pz-LinkCard < 2.5.3 - Caching Management via CSRF
Slug
pz-linkcard
Published
2024-03-07
Title
Pz-LinkCard < 2.5.3 - Contributor+ SSRF
Slug
pz-linkcard
Published
2024-03-07
Title
Pz-LinkCard < 2.5.3 - Admin+ Stored XSS
Slug
pz-linkcard
Published
2024-03-07
Title
Pz-LinkCard < 2.5.3 - Reflected XSS