WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
themify-shortcodes
Published
2024-05-08
Title
Themify Shortcodes < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode
Slug
themify-shortcodes
Published
2024-08-07
Title
Themify Shortcodes < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-shortcodes
Published
2025-04-16
Title
Themify Shortcodes < 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-store-locator
Published
2024-12-12
Title
Themify Store Locator < 1.2.0 - Cross-Site Request Forgery
Slug
themify-wc-product-filter
Published
2022-05-18
Title
Themify - WooCommerce Product Filter < 1.3.8 - Reflected Cross-Site Scripting
Slug
themify-wc-product-filter
Published
2024-03-11
Title
WooCommerce Product Filter < 1.4.4 - Filter Deletion via CSRF
Slug
themify-wc-product-filter
Published
2024-03-11
Title
WooCommerce Product Filter < 1.4.4 - Reflected XSS
Slug
themify-wc-product-filter
Published
2024-03-11
Title
WooCommerce Product Filter < 1.4.4 - Admin+ Stored XSS
Slug
themify-wc-product-filter
Published
2024-06-20
Title
Themify - WooCommerce Product Filter < 1.5.0 - Unauthenticated SQL Injection via conditions Parameter
Slug
themify-wc-product-filter
Published
2024-09-23
Title
Themify – WooCommerce Product Filter < 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
theperfectweddingnl-widget
Published
2025-01-06
Title
ThePerfectWedding.nl Widget < 2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
theplus_elementor_addon
Published
2021-03-08
Title
The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass
Slug
theplus_elementor_addon
Published
2021-05-31
Title
The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)
Slug
theplus_elementor_addon
Published
2021-05-31
Title
The Plus Addons for Elementor Page Builder < 4.1.11 - Arbitrary Reset Pwd Email Sending
Slug
theplus_elementor_addon
Published
2021-05-31
Title
The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect
Slug
theplus_elementor_addon
Published
2021-12-13
Title
The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure
Slug
theplus_elementor_addon
Published
2021-12-13
Title
The Plus Addons for Elementor Pro < 5.0.7 - Unauthenticated SQL Injection
Slug
theplus_elementor_addon
Published
2023-10-31
Title
The Plus Addons for Elementor Pro < 5.2.9 - Unauthenticated Local File Inclusion
Slug
theplus_elementor_addon
Published
2024-05-29
Title
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce < 5.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget
Slug
theplus_elementor_addon
Published
2024-06-20
Title
The Plus Addons for Elementor Page Builder < 5.6.0 - Reflected Cross-Site Scripting via WP Login and Register Widget
Slug
theplus_elementor_addon
Published
2024-06-20
Title
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce < 5.6.0 - Authenticated (Contributor+) Local File Inclusion
Slug
theplus_elementor_addon
Published
2025-05-20
Title
The Plus Addons for Elementor Pro < 6.3.7 - Missing Authorization
Slug
theplus_elementor_addon
Published
2025-07-16
Title
The Plus Addons for Elementor Pro < 6.3.7 - Missing Authorization
Slug
thesis-openhook
Published
2023-09-29
Title
OpenHook < 4.3.1 - Subscriber+ Remote Code Execution
Slug
thesis-openhook
Published
2025-12-31
Title
OpenHook <= 4.3.1 - Cross-Site Request Forgery