WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
testimonials-creator
Published
2026-01-13
Title
Testimonials Creator 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
testimonials-showcase
Published
2025-06-05
Title
Testimonials Showcase < 1.9.18 - Missing Authorization
Slug
testimonials-showcase
Published
2025-07-03
Title
Testimonials Showcase < 1.9.18 - Reflected Cross-Site Scripting
Slug
testimonials-widget
Published
2020-07-03
Title
Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSS
Slug
testimonials-widget
Published
2024-06-05
Title
Testimonials Widget <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via testimonials Shortcode
Slug
testimonials-widget
Published
2024-07-06
Title
Testimonials Widget <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
text-advertisements
Published
2024-11-08
Title
Text Advertisements <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
text-hover
Published
2022-03-28
Title
Text Hover < 4.2 - Admin+ Stored Cross-Site Scripting
Slug
text-selection-color
Published
2025-03-28
Title
Text Selection Color <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
text-to-audio
Published
2025-09-22
Title
Text To Speech TTS Accessibility < 1.9.31 - Missing Authorization
Slug
textboxes
Published
2024-10-24
Title
Textboxes <= 0.1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
textbuilder
Published
2025-10-02
Title
TextBuilder 1.0.0 - 1.1.1 - Cross-Site Request Forgery to Privilege Escalation via Account Takeover
Slug
texteller
Published
2025-01-16
Title
Texteller <= 1.3.0 - Reflected Cross-Site Scripting
Slug
textme-sms-integration
Published
2021-08-24
Title
TextME SMS < 1.8.9 - Authenticated Stored XSS
Slug
textme-sms-integration
Published
2023-11-23
Title
TextMe SMS < 1.9.1 - Subscriber+ Settings Update
Slug
textme-sms-integration
Published
2025-04-03
Title
TextMe SMS < 1.9.2 - Missing Authorization
Slug
tf-numbers-number-counter-animaton
Published
2023-03-27
Title
TF Random Numbers < 2.0.1 - Subscriber+ Arbitrary Option Update
Slug
tf-woo-product-grid
Published
2025-09-23
Title
TF Woo Product Grid Addon For Elementor <= 1.0.1 - Unauthenticated PHP Object Injection
Slug
tgg-wp-optimizer
Published
2025-03-28
Title
TGG WP Optimizer <= 1.25 - Admin+ Stored XSS
Slug
th-variation-swatches
Published
2025-01-22
Title
Variation Swatches for WooCommerce 1.0.8 - 1.3.2 - Cross-Site Request Forgery to Plugin Settings Reset
Slug
th-wishlist
Published
2025-11-24
Title
Wishlist for WooCommerce < 1.1.4 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
Slug
th23-social
Published
2022-04-19
Title
th23 Social <= 1.2.0 - Admin+ Stored Cross-Site Scripting
Slug
thai-lottery-widget
Published
2025-12-04
Title
Thai Lottery Widget <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
thank-me-later
Published
2022-03-28
Title
Thank Me Later <= 3.3.4 - Admin+ Stored Cross-Site Scripting
Slug
thanks-you-counter-button
Published
2014-08-01
Title
Thank You Counter Button - Multiple Stored Cross-Site Scripting (XSS)