WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
propertyhive
Published
2024-01-31
Title
PropertyHive < 2.0.7 - Missing Authorization via activate_pro_feature
Slug
propertyhive
Published
2024-03-13
Title
PropertyHive < 2.0.10 - Authenticated (Subscriber+) PHP Object Injection
Slug
propertyhive
Published
2024-03-25
Title
PropertyHive < 2.0.9 - Reflected Cross-Site Scripting
Slug
propertyhive
Published
2024-04-24
Title
PropertyHive < 2.0.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Slug
propertyhive
Published
2024-05-03
Title
PropertyHive < 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
propertyhive
Published
2024-06-06
Title
PropertyHive < 2.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
propertyhive
Published
2024-06-20
Title
PropertyHive < 2.0.10 - Missing Authorization
Slug
propertyhive
Published
2024-09-16
Title
PropertyHive < 2.0.20 - Cross-Site Request Forgery via save_account_details
Slug
propertyhive
Published
2024-12-18
Title
PropertyHive < 2.1.1 - Reflected XSS
Slug
propertyhive
Published
2025-04-16
Title
PropertyHive < 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
propertyhive
Published
2025-09-03
Title
PropertyHive < 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
propertyhive
Published
2025-11-24
Title
PropertyHive < 2.1.13 - Missing Authorization
Slug
propertyhive
Published
2025-11-24
Title
PropertyHive < 2.1.13 - Missing Authorization
Slug
propertyhive
Published
2026-05-23
Title
Property Hive < 2.2.3 - Unauthenticated Stored Cross-Site Scripting
Slug
propertyhive
Published
2026-07-07
Title
Property Hive < 2.2.4 - Unauthenticated Stored Cross-Site Scripting
Slug
propertyshift
Published
2024-11-04
Title
PropertyShift <= 1.0.0 - Reflected Cross-Site Scripting
Slug
proplayer
Published
2014-08-01
Title
ProPlayer 4.7.9.1 - SQL Injection
Slug
propovoice
Published
2024-05-10
Title
Propovoice CRM < 1.7.6.3 - Unauthenticated Stored Cross-Site Scripting
Slug
propovoice
Published
2024-08-16
Title
Propovoice CRM <= 1.7.8 - Unauthenticated Insecure Direct Object Reference
Slug
propovoice
Published
2025-09-10
Title
Propovoice < 1.7.7 - Unauthenticated Arbitrary File Read
Slug
propovoice-pro
Published
2024-08-26
Title
Propovoice Pro <= 1.7.0.3 - Unauthenticated SQL Injection
Slug
proranktracker
Published
2025-03-24
Title
Pro Rank Tracker <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
prosolution-wp-client
Published
2026-04-08
Title
ProSolution WP Client < 2.0.0 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess
Slug
prosolution-wp-client
Published
2026-05-19
Title
ProSolution WP Client < 2.0.1 - Unauthenticated Arbitrary File Upload via 'files'
Slug
proteccion-datos-rgpd
Published
2026-01-24
Title
Protección de datos – RGPD < 0.69 - Missing Authorization