WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
the-grid
Published
2026-01-29
Title
The Grid < 2.8.0 - Missing Authorization
Slug
the-grid
Published
2026-03-23
Title
The Grid < 2.8.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
the-grid
Published
2026-03-23
Title
The Grid < 2.8.0 - Missing Authorization
Slug
the-grid
Published
2026-08-13
Title
The Grid < 2.8.1 - Subscriber+ Privilege Escalation
Slug
the-guardian-news-feed
Published
2026-01-16
Title
The Guardian News Feed <= 1.2 - Cross-Site Request Forgery to Settings Update
Slug
the-holiday-calendar
Published
2015-08-10
Title
The Holiday Calendar <= 1.11.2 - Cross-Site Scripting (XSS)
Slug
the-holiday-calendar
Published
2025-06-05
Title
The Holiday Calendar <= 1.18.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
the-logo-slider
Published
2025-04-01
Title
The Logo Slider <= 1.0.0 - Reflected Cross-Site Scripting
Slug
the-loops
Published
2025-01-16
Title
The Loops <= 1.0.2 - Reflected Cross-Site Scripting
Slug
the-moneytizer
Published
2024-03-15
Title
The Moneytizer < 9.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
the-moneytizer
Published
2024-06-05
Title
The Moneytizer < 10.0.1 - Cross-Site Request Forgery via multiple AJAX actions
Slug
the-moneytizer
Published
2024-06-05
Title
The Moneytizer < 10.0.1 - Missing Authorization via multiple AJAX actions
Slug
the-moneytizer
Published
2025-12-31
Title
The Moneytizer < 10.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
the-moneytizer
Published
2026-02-22
Title
The Moneytizer <= 10.0.10 - Missing Authorization
Slug
the-pack-addon
Published
2024-04-22
Title
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) < 2.0.8.3 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
the-pack-addon
Published
2024-04-22
Title
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) < 2.0.8.4 - Reflected Cross-Site Scripting
Slug
the-pack-addon
Published
2024-07-16
Title
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) < 2.0.8.7 - Authenticated (contributor+) Local File Inclusion
Slug
the-pack-addon
Published
2024-09-30
Title
The Pack Elementor addons < 2.0.9 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
the-pack-addon
Published
2024-10-24
Title
The Pack Elementor addons < 2.1.0 - Authenticated (Contributor+) Local File Inclusion
Slug
the-pack-addon
Published
2024-11-08
Title
The Pack Elementor addons < 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
the-pack-addon
Published
2025-03-27
Title
The Pack Elementor addons < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
the-pack-addon
Published
2025-03-27
Title
The Pack Elementor addons < 2.1.2 - Authenticated (Contributor+) Local File Inclusion
Slug
the-pack-addon
Published
2025-04-24
Title
The Pack Elementor addons <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
the-pack-addon
Published
2025-06-26
Title
The Pack Elementor addon < 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
the-pack-addon
Published
2025-09-29
Title
The Pack Elementor addon < 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typing Letter Widget