WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
t-countdown
Published
2024-10-29
Title
T(-) Countdown <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
tab-my-content
Published
2025-01-16
Title
Tab My Content <= 1.0.0 - Reflected Cross-Site Scripting
Slug
tabbed
Published
2021-12-06
Title
Tab - Accordion, FAQ < 1.3.2 - Unauthenticated AJAX Calls
Slug
tabbed-login
Published
2025-03-11
Title
Tabbed Login Widget <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tabby-checkout
Published
2026-01-21
Title
Tabby Checkout < 5.9.1 - Unauthenticated Information Exposure
Slug
tabgarb
Published
2025-03-11
Title
TabGarb Pro <= 2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
table-addons-for-elementor
Published
2024-06-21
Title
Table Addons for Elementor < 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter
Slug
table-creator
Published
2025-10-02
Title
TableGen – Data Table Generator <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
table-genie
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
table-genie
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
table-maker
Published
2024-05-07
Title
Table Maker <= 1.9.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
table-of-contents
Published
2025-02-24
Title
Table of Contents Block <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
table-of-contents-creator
Published
2026-01-19
Title
Table of Contents Creator <= 1.6.4.1 - Reflected Cross-Site Scripting
Slug
table-of-contents-plus
Published
2022-12-19
Title
Table of Contents Plus < 2212 - Contributor+ Stored XSS
Slug
table-of-contents-plus
Published
2023-09-29
Title
Table of Contents Plus < 2309 - Settings Update via CSRF
Slug
table-of-contents-plus
Published
2023-09-19
Title
Table of Contents Plus < 2309 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
table-of-contents-plus
Published
2024-10-15
Title
Table of Contents Plus < 2411.1 - Admin+ Stored XSS
Slug
table-of-contents-plus
Published
2024-10-14
Title
Table of Contents Plus < 2411 - Cross-Site Request Forgery
Slug
tableberg
Published
2025-04-04
Title
Table Block by Tableberg < 0.6.12 - Contributor+ Stored XSS
Slug
tableberg
Published
2025-12-08
Title
Table Block by Tableberg < 0.6.10 - Missing Authorization
Slug
tablepress
Published
2017-11-14
Title
TablePress <= 1.8 - Authenticated XML External Entity (XXE)
Slug
tablepress
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tablepress
Published
2024-01-31
Title
TablePress < 2.2.5 - Authenticated(Author+) Server Side Request Forgery(SSRF) via _get_import_files
Slug
tablepress
Published
2024-06-06
Title
TablePress – Tables in WordPress made easy < 2.3.2 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind
Slug
tablepress
Published
2024-10-11
Title
TablePress < 2.4.3 - Author+ Stored XSS