WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tabbed
Published
2021-12-06
Title
Tab - Accordion, FAQ < 1.3.2 - Unauthenticated AJAX Calls
Slug
table-genie
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
table-genie
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
table-of-contents-plus
Published
2022-12-19
Title
Table of Contents Plus < 2212 - Contributor+ Stored XSS
Slug
table-of-contents-plus
Published
2023-09-19
Title
Table of Contents Plus < 2309 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
table-of-contents-plus
Published
2023-09-29
Title
Table of Contents Plus < 2309 - Settings Update via CSRF
Slug
tablepress
Published
2017-11-14
Title
TablePress <= 1.8 - Authenticated XML External Entity (XXE)
Slug
tablepress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tablepress
Published
2024-01-31
Title
TablePress < 2.2.5 - Authenticated(Author+) Server Side Request Forgery(SSRF) via _get_import_files
Slug
tablesome
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tablesome
Published
2023-04-24
Title
Tablesome < 1.0.9 - Reflected XSS
Slug
tablesome
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tablesome
Published
2024-03-16
Title
Table & Contact Form 7 Database – Tablesome < 1.0.28 - Reflected Cross-Site Scripting
Slug
tablesome
Published
2024-04-10
Title
Table & Contact Form 7 Database – Tablesome < 1.0.26 - Cross-Site Request Forgery
Slug
taboola
Published
2023-10-03
Title
Taboola < 2.0.2 - CSRF
Slug
tabs-pro
Published
2023-10-22
Title
Tab Ultimate < 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
tabs-responsive
Published
2022-05-02
Title
Tabs Responsive < 2.2.8 - Editor+ Stored Cross-Site Scripting
Slug
tabs-shortcode-and-widget
Published
2024-02-20
Title
Tabs Shortcode and Widget <= 1.17 - Contributor+ Stored Cross-Site Scripting
Slug
tabs-with-posts
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tabs-with-posts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tag-groups
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tag-groups
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tagembed-widget
Published
2024-04-16
Title
Tagembed: Embed Twitter Feed, Google Reviews, YouTube Videos, TikTok, RSS Feed & More Social Media Feeds < 4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
taggator
Published
2014-08-01
Title
TagGator - 'tagid' Parameter SQL Injection
Slug
taggbox-widget
Published
2023-10-12
Title
Taggbox <= 3.3 - Cross-Site Request Forgery