WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
third-party-cookie-eraser
Published
2024-11-28
Title
Third Party Cookie Eraser <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
thirstyaffiliates
Published
2020-05-22
Title
ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS
Slug
thirstyaffiliates
Published
2022-03-31
Title
ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation
Slug
thirstyaffiliates
Published
2022-03-31
Title
ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF
Slug
thirstyaffiliates
Published
2025-12-15
Title
ThirstyAffiliates < 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thirstyaffiliates
Published
2026-02-02
Title
ThirstyAffiliates < 3.11.10 - Cross-Site Request Forgery
Slug
this-day-in-history
Published
2023-05-25
Title
This Day In History <= 3.10.1 - Unauthenticated Reflected XSS
Slug
this-or-that
Published
2025-10-21
Title
This-or-That by André Boekhorst <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thoughtful-comments
Published
2025-01-24
Title
FV Thoughtful Comments < 0.3.6 - Missing Authorization
Slug
threepress
Published
2025-02-17
Title
Threepress < 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
threewp-broadcast
Published
2024-12-05
Title
Broadcast < 51.02 - Reflected Cross-Site Scripting
Slug
threewp-email-reflector
Published
2014-08-01
Title
ThreeWP Email Reflector 1.13 - Subject Field XSS
Slug
thrive-ab-page-testing
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-apprentice
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-automator
Published
2023-12-27
Title
Thrive Automator < 1.17.1 - Cross-Site Request Forgery
Slug
thrive-clever-widgets
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-comments
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-dashboard
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-headline-optimizer
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-leads
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-ovation
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-quiz-builder
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-ultimatum
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
thrive-visual-editor
Published
2021-03-24
Title
All Thrive Themes and Plugins - Unauthenticated Option Update
Slug
throws-spam-away
Published
2022-05-16
Title
Throws SPAM Away < 3.3.1 - Comment Deletion via CSRF