WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
thesis-openhook
Published
2025-12-31
Title
OpenHook <= 4.3.1 - Cross-Site Request Forgery
Slug
thesography
Published
2023-09-03
Title
Exifography <= 1.3.1 - Admin+ Stored XSS
Slug
thethe-layout-grid
Published
2014-08-01
Title
thethe-layout-grid <= 1.0.0 - XSS in ZeroClipboard.
Slug
thim-blocks
Published
2026-01-16
Title
Gutenberg Thim Blocks < 1.0.2 - Authenticated (Contributor+) Arbitrary File Read via 'iconSVG' Parameter
Slug
thim-core
Published
2025-08-14
Title
Thim Core <= 2.3.3 - Missing Authorization
Slug
thim-core
Published
2025-08-14
Title
Thim Core <= 2.3.3 - Cross-Site Request Forgery
Slug
thim-elementor-kit
Published
2024-05-10
Title
Thim Elementor Kit < 1.1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
thim-elementor-kit
Published
2024-05-06
Title
Thim Elementor Kit < 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thim-elementor-kit
Published
2025-01-06
Title
Thim Elementor Kit < 1.2.9.1 - Contributor+ Stored XSS
Slug
thim-elementor-kit
Published
2025-01-24
Title
Thim Elementor Kit < 1.2.9 - Missing Authorization
Slug
thim-elementor-kit
Published
2025-12-06
Title
Thim Elementor Kit < 1.3.4 - Authenticated (Contributor+) Insecure Direct Object Reference
Slug
thinkific-uploader
Published
2022-07-18
Title
Thinkific Uploader <= 1.0.0 - Admin+ Stored Cross-Site Scripting
Slug
thinkit-wp-contact-form
Published
2014-08-01
Title
ThinkIT <= 0.3 - wp-admin/admin.php Contact Form Deletion CSRF
Slug
thinkit-wp-contact-form
Published
2014-08-01
Title
ThinkIT <= 0.2 - wp-admin/admin.php toitcf_current_id Parameter XSS
Slug
thinktwit
Published
2021-08-18
Title
ThinkTwit < 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
thinkun-remind
Published
2014-08-01
Title
Thinkun Remind 1.1.3 - exportData.php dirPath Parameter Traversal Arbitrary File Access
Slug
third-party-cookie-eraser
Published
2024-11-28
Title
Third Party Cookie Eraser <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
thirstyaffiliates
Published
2020-05-22
Title
ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS
Slug
thirstyaffiliates
Published
2022-03-31
Title
ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation
Slug
thirstyaffiliates
Published
2022-03-31
Title
ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF
Slug
thirstyaffiliates
Published
2025-12-15
Title
ThirstyAffiliates < 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
this-day-in-history
Published
2023-05-25
Title
This Day In History <= 3.10.1 - Unauthenticated Reflected XSS
Slug
this-or-that
Published
2025-10-21
Title
This-or-That by André Boekhorst <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thoughtful-comments
Published
2025-01-24
Title
FV Thoughtful Comments < 0.3.6 - Missing Authorization
Slug
threepress
Published
2025-02-17
Title
Threepress < 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting