WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
team-showcase-supreme
Published
2024-11-11
Title
Team Member < 7.5 - Editor+ Local File Inclusion
Slug
team-showcase-supreme
Published
2026-05-07
Title
Team Members – Multi Language Supported Team Plugin < 8.6 - Authenticated (Editor+) SQL Injection
Slug
team-showcase-ultimate
Published
2024-11-04
Title
Team Showcase and Slider – Team Members Builder <= 1.3 - Reflected Cross-Site Scripting
Slug
teamleader-form-integration
Published
2021-04-16
Title
Outdated php-mod/curl Library - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
teaser-maker-standard
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
Slug
tec-subscriber-addons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tec-subscriber-addons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
techlife-cpt
Published
2025-12-30
Title
Tech Life CPT <= 16.4 - Authenticated (Contributor+) PHP Object Injection
Slug
tecslider
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tecslider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tedwp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tedwp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
teleadmin
Published
2024-11-04
Title
TeleAdmin <= 1.0.0 - Reflected Cross-Site Scripting
Slug
telecash-ricaricaweb
Published
2024-10-09
Title
Telecash Ricaricaweb <= 2.2 - Unauthenticated PHP Object Injection
Slug
telefication
Published
2021-09-21
Title
Telefication <= 1.8.0 - Open Relay & Server-Side Request Forgery
Slug
telegram-bot
Published
2023-05-29
Title
Telegram Bot & Channel < 3.6.3 - Admin+ Stored XSS
Slug
telegram-bot
Published
2024-07-20
Title
Telegram Bot & Channel < 4.0.1 - Cross-Site Request Forgery
Slug
telegram-bot
Published
2025-11-24
Title
Telegram Bot & Channel < 4.1.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username
Slug
telegram-for-wp
Published
2025-06-12
Title
Telegram for WP <= 1.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
telephone-number-linker
Published
2023-11-06
Title
Telephone Number Linker <= 1.2 - Contributor+ Stored XSS
Slug
teleport
Published
2025-03-24
Title
Teleport <= 1.2.4 - Reflected Cross-Site Scripting
Slug
telsender
Published
2023-09-04
Title
TelSender < 1.14.12 - Subscriber+ Settings Update
Slug
telsender
Published
2026-01-27
Title
TelSender < 1.14.15 - Unauthenticated Stored XSS via Telegram Chat Title
Slug
telugu-bible-verse-daily
Published
2021-07-19
Title
Telugu Bible Verse Daily <= 1.0 - CSRF to Stored XSS
Slug
temp-mail
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting