WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tedwp
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
teleadmin
Published
2024-11-04
Title
TeleAdmin <= 1.0.0 - Reflected Cross-Site Scripting
Slug
telecash-ricaricaweb
Published
2024-10-09
Title
Telecash Ricaricaweb <= 2.2 - Unauthenticated PHP Object Injection
Slug
telefication
Published
2021-09-21
Title
Telefication <= 1.8.0 - Open Relay & Server-Side Request Forgery
Slug
telegram-bot
Published
2023-05-29
Title
Telegram Bot & Channel < 3.6.3 - Admin+ Stored XSS
Slug
telegram-bot
Published
2024-07-20
Title
Telegram Bot & Channel < 4.0.1 - Cross-Site Request Forgery
Slug
telegram-bot
Published
2025-11-24
Title
Telegram Bot & Channel < 4.1.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username
Slug
telegram-for-wp
Published
2025-06-12
Title
Telegram for WP <= 1.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
telephone-number-linker
Published
2023-11-06
Title
Telephone Number Linker <= 1.2 - Contributor+ Stored XSS
Slug
teleport
Published
2025-03-24
Title
Teleport <= 1.2.4 - Reflected Cross-Site Scripting
Slug
telsender
Published
2023-09-04
Title
TelSender < 1.14.12 - Subscriber+ Settings Update
Slug
telugu-bible-verse-daily
Published
2021-07-19
Title
Telugu Bible Verse Daily <= 1.0 - CSRF to Stored XSS
Slug
temp-mail
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
template-events-calendar
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
template-events-calendar
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
template-events-calendar
Published
2023-12-28
Title
Events Shortcodes & Templates For The Events Calendar < 2.3.2 - Authenticated (Contributor+) SQL Injection via shortcode
Slug
template-kit-export
Published
2024-07-06
Title
Template Kit – Export < 1.0.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
template-kit-import
Published
2024-04-01
Title
Template Kit – Import < 1.0.15 - Author+ Stored XSS
Slug
template-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
template-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
templately
Published
2023-10-16
Title
Templately < 2.2.6 - Unauthenticated Arbitrary Post Deletion
Slug
templately
Published
2024-09-25
Title
Templately < 3.1.3 - Missing Authorization
Slug
templately
Published
2024-10-24
Title
Templately < 3.1.6 - Missing Authorization via AJAX actions
Slug
templately
Published
2024-10-24
Title
Templately < 3.1.6 - Missing Authorization
Slug
templately
Published
2025-08-20
Title
Templately < 3.2.8 - Authenticated (Author+) Information Disclosure