WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
templately
Published
2026-01-09
Title
Templately < 3.4.9 - Unauthenticated Limited Arbitrary JSON File Write
Slug
templatera
Published
2025-08-14
Title
Templatera < 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
templates-and-addons-for-wpbakery-page-builder
Published
2026-02-10
Title
Business Template Blocks for WPBakery (Visual Composer) Page Builder <= 1.3.2 - Reflected Cross-Site Scripting
Slug
templates-patterns-collection
Published
2023-11-07
Title
Cloud Templates & Patterns collection < 1.2.3 - Sensitive Information Exposure via Log File
Slug
templatesnext-onepager
Published
2024-06-06
Title
TemplatesNext OnePager <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
templatesnext-toolkit
Published
2023-01-17
Title
TemplatesNext ToolKit < 3.2.8 - Contributor+ Stored XSS via Shortcode
Slug
templatesnext-toolkit
Published
2023-01-18
Title
TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS
Slug
templatesnext-toolkit
Published
2023-01-17
Title
TemplatesNext ToolKit < 3.2.8 - Contributor+ Stored XSS
Slug
templatesnext-toolkit
Published
2025-01-06
Title
TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
templatesnext-toolkit
Published
2025-02-28
Title
TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
templatespare
Published
2024-08-02
Title
Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor & Gutenberg Blocks! – TemplateSpare < 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Theme Update
Slug
templazee
Published
2025-07-09
Title
Templazee <= 1.0.2 - Missing Authorization
Slug
templines-helper-core
Published
2025-02-26
Title
Templines Elementor Helper Core < 2.8 - Authenticated (Subscriber+) Privilege Escalation
Slug
temporarily-hidden-content
Published
2025-07-18
Title
Temporarily Hidden Content <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
temporary-login-without-password
Published
2021-11-15
Title
Temporary Login Without Password < 1.7.1 - Subscriber+ Plugin's Settings Update
Slug
tennis-court-bookings
Published
2025-07-07
Title
Tennis Court Bookings <= 1.2.7 - Reflected Cross-Site Scripting
Slug
tennis-court-bookings
Published
2026-02-18
Title
Tennis Court Bookings <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Admin Settings and Calendar Parameters
Slug
tenweb-speed-optimizer
Published
2023-10-31
Title
10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion
Slug
tenweb-speed-optimizer
Published
2025-12-05
Title
10Web Booster < 2.32.11 - Subscriber+ Arbitrary Folder Deletion
Slug
tera-charts
Published
2014-08-01
Title
Tera Charts 0.1 - charts/zoomabletreemap.php fn Parameter Remote Path Traversal File Disclosure
Slug
tera-charts
Published
2014-08-01
Title
Tera Charts 0.1 - Unauthenticated Remote Path Traversal File Disclosure
Slug
tera-charts
Published
2016-05-11
Title
Tera Charts 1.0 - Unauthenticated Cross-Site Scripting (XSS)
Slug
terillion-reviews
Published
2014-08-01
Title
Terillion Reviews < 1.2 - Profile Id Field XSS
Slug
term-and-category-based-posts-widget
Published
2024-07-19
Title
Category Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSS
Slug
term-taxonomy-converter
Published
2025-01-21
Title
Term Taxonomy Converter < 1.2.1 - Reflected Cross-Site Scripting