WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
the-plus-addons-for-elementor-page-builder
Published
2026-05-21
Title
The Plus Addons for Elementor < 6.4.12 - Contributor+ Stored Cross-Site Scripting
Slug
the-plus-addons-for-elementor-page-builder
Published
2026-05-21
Title
The Plus Addons for Elementor < 6.4.12 - Contributor+ Stored Cross-Site Scripting
Slug
the-plus-addons-for-elementor-page-builder
Published
2026-09-24
Title
The Plus Addons for Elementor – Mega Menu, Header Footer, Post Grid, AI Widgets & Templates < 6.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
the-post-grid
Published
2023-02-23
Title
The Post Grid <= 5.0.4 - Settings Update via CSRF
Slug
the-post-grid
Published
2023-08-07
Title
The Post Grid < 7.2.8 - Block CSS Update via CSRF
Slug
the-post-grid
Published
2024-04-30
Title
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid < 7.7.0 - Missing Authorization
Slug
the-post-grid
Published
2024-06-06
Title
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid < 7.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
the-post-grid
Published
2024-07-01
Title
The Post Grid < 7.7.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via section title tag
Slug
the-post-grid
Published
2024-07-04
Title
The Post Grid < 7.7.5 - Missing Authorization via save_block_css
Slug
the-post-grid
Published
2024-07-04
Title
The Post Grid < 7.7.5 - Missing Authorization via AJAX
Slug
the-post-grid
Published
2024-07-04
Title
The Post Grid < 7.7.5 - Missing Authorization via REST API
Slug
the-post-grid
Published
2024-08-28
Title
The Post Grid < 7.7.12 - Authenticated (Contributor+) Information Disclosure
Slug
the-post-grid
Published
2024-09-09
Title
The Post Grid < 7.5.0 - Editor+ Stored XSS via Grid Creation
Slug
the-post-grid
Published
2025-03-27
Title
The Post Grid < 7.7.18 - Contributor+ Local File Inclusion
Slug
the-post-grid
Published
2026-05-27
Title
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid < 7.9.3 - Missing Authorization
Slug
the-post-grid
Published
2026-09-23
Title
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid < 7.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
the-post-grid
Published
2026-09-23
Title
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid < 7.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
the-post-grid
Published
2026-09-22
Title
The Post Grid < 7.9.5 - Contributor+ Stored HTML/iframe Injection via wp_kses_post Allow-List Widening
Slug
the-pressengine
Published
2026-09-15
Title
The Pressengine <= 1.0 - Unauthenticated Authentication Bypass
Slug
the-publisher-desk-ads-txt
Published
2026-02-27
Title
The Publisher Desk ads.txt <= 1.5.0 - Missing Authorization
Slug
the-sorter
Published
2021-08-22
Title
The Sorter <= 1.0 - Authenticated SQL Injection
Slug
the-tech-tribe
Published
2025-09-26
Title
The Tribal < 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
the-tech-tribe
Published
2025-09-26
Title
The Tribal < 1.3.4 - Unauthenticated Sensitive Information Exposure
Slug
the-tech-tribe
Published
2026-03-02
Title
The Tribal < 1.3.5 - Unauthenticated Information Exposure
Slug
the-tooltip
Published
2026-01-08
Title
The Tooltip <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes