WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
threewp-broadcast
Published
2024-12-05
Title
Broadcast < 51.02 - Reflected Cross-Site Scripting
Slug
threewp-email-reflector
Published
2014-08-01
Title
ThreeWP Email Reflector 1.13 - Subject Field XSS
Slug
thrive-ab-page-testing
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-apprentice
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-automator
Published
2023-12-27
Title
Thrive Automator < 1.17.1 - Cross-Site Request Forgery
Slug
thrive-clever-widgets
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-comments
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-dashboard
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-headline-optimizer
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-leads
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-ovation
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-quiz-builder
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-ultimatum
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-visual-editor
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
throws-spam-away
Published
2022-05-16
Title
Throws SPAM Away < 3.3.1 - Comment Deletion via CSRF
Slug
thumbnail-editor
Published
2025-06-27
Title
Thumbnail Editor <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thumbnail-grid
Published
2025-03-11
Title
Featured Image Thumbnail Grid < 6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thumbs-rating
Published
2024-03-29
Title
Thumbs Rating <= 5.1.0 - Unauthenticated Insecure Direct Object Reference
Slug
ti-woocommerce-wishlist
Published
2020-10-16
Title
TI WooCommerce Wishlist - Authenticated WP Options Change
Slug
ti-woocommerce-wishlist
Published
2022-01-31
Title
TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection
Slug
ti-woocommerce-wishlist
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ti-woocommerce-wishlist
Published
2024-08-22
Title
TI WooCommerce Wishlist < 2.9.0 - Unauthenticated SQL Injection
Slug
ti-woocommerce-wishlist
Published
2024-09-19
Title
TI WooCommerce Wishlist < 2.9.1 - Unauthenticated SQL Injection via lang parameters
Slug
ti-woocommerce-wishlist
Published
2024-12-03
Title
TI WooCommerce Wishlist < 2.9.2 - Unauthenticated Plugin Setup Wizard Access
Slug
ti-woocommerce-wishlist
Published
2025-05-15
Title
TI WooCommerce Wishlist < 2.10.0 - Contributor+ Stored XSS