WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tennis-court-bookings
Published
2025-07-07
Title
Tennis Court Bookings <= 1.2.7 - Reflected Cross-Site Scripting
Slug
tennis-court-bookings
Published
2026-02-18
Title
Tennis Court Bookings <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Admin Settings and Calendar Parameters
Slug
tenweb-speed-optimizer
Published
2023-10-31
Title
10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion
Slug
tenweb-speed-optimizer
Published
2025-12-05
Title
10Web Booster < 2.32.11 - Subscriber+ Arbitrary Folder Deletion
Slug
tenweb-speed-optimizer
Published
2026-08-17
Title
TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass
Slug
tenweb-speed-optimizer
Published
2026-09-22
Title
10Web Booster < 2.34.0 - Unauthenticated Connection Secret Disclosure and Deletion
Slug
tenweb-speed-optimizer
Published
2026-09-24
Title
10Web Booster – Website speed optimization, Cache & Page Speed optimizer < 2.34.0 - Authenticated (Contributor+) PHP Object Injection
Slug
tera-charts
Published
2014-08-01
Title
Tera Charts 0.1 - charts/zoomabletreemap.php fn Parameter Remote Path Traversal File Disclosure
Slug
tera-charts
Published
2014-08-01
Title
Tera Charts 0.1 - Unauthenticated Remote Path Traversal File Disclosure
Slug
tera-charts
Published
2016-05-11
Title
Tera Charts 1.0 - Unauthenticated Cross-Site Scripting (XSS)
Slug
terillion-reviews
Published
2014-08-01
Title
Terillion Reviews < 1.2 - Profile Id Field XSS
Slug
term-and-category-based-posts-widget
Published
2024-07-19
Title
Category Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSS
Slug
term-pages
Published
2026-08-06
Title
Term Pages < 2.0.0 - Unauthenticated SQL Injection via tp_lookup
Slug
term-taxonomy-converter
Published
2025-01-21
Title
Term Taxonomy Converter < 1.2.1 - Reflected Cross-Site Scripting
Slug
termageddon-usercentrics
Published
2025-09-22
Title
Termageddon: Cookie Consent & Privacy Compliance < 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
termin-kalender
Published
2024-12-12
Title
Termin-Kalender < 1.00.04 - Missing Authorization to Authenticated (Subscriber+)
Slug
terminal-africa
Published
2025-04-10
Title
Terminal Africa <= 1.13.28 - Reflected Cross-Site Scripting
Slug
terms-and-conditions-per-product
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
terms-and-conditions-per-product
Published
2025-03-27
Title
Terms & Conditions Per Product < 1.2.16 - Missing Authorization
Slug
terms-before-download
Published
2025-03-31
Title
Terms Before Download <= 1.0.5 - Contributor+ Stored XSS
Slug
terms-descriptions
Published
2023-07-10
Title
Terms descriptions < 3.4.5 - Reflected XSS
Slug
terms-descriptions
Published
2024-09-26
Title
Terms descriptions < 3.4.8 - Admin+ Stored XSS
Slug
terms-descriptions
Published
2024-10-23
Title
Terms descriptions < 3.4.7 - Reflected Cross-Site Scripting
Slug
terms-descriptions
Published
2025-07-17
Title
Terms descriptions < 3.4.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
terms-descriptions
Published
2025-12-31
Title
Terms descriptions <= 3.4.9 - Unauthenticated Information Exposure