WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ticket-spot
Published
2025-10-02
Title
Event Tickets, RSVPs, Calendar < 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ticket-tailor
Published
2024-03-15
Title
Ticket Tailor < 1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ticketsource-events
Published
2024-12-19
Title
Sell Tickets Online – TicketSource Ticket Shop for WordPress < 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tida-url-screenshot
Published
2024-10-21
Title
Tida URL Screenshot < 1.0.2 - Reflected Cross-Site Scripting
Slug
tidekey
Published
2025-03-27
Title
Tidekey <= 1.1 - Reflected Cross-Site Scripting
Slug
tidio-form
Published
2016-04-12
Title
Easy Contact Form Builder <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
tidio-gallery
Published
2016-04-12
Title
Tidio Gallery <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
tidio-live-chat
Published
2019-11-05
Title
Tidio Live Chat < 4.2.0 - CSRF to Stored XSS
Slug
tidy-up
Published
2024-12-16
Title
Tidy Up <= 1.3 - Cross-Site Request Forgery
Slug
tidyro
Published
2025-01-16
Title
Tidy.ro <= 1.3 - Reflected Cross-Site Scripting
Slug
tiempocom
Published
2023-04-25
Title
Tiempo.com <= 0.1.2 - Stored XSS via CSRF
Slug
tiempocom
Published
2023-04-25
Title
Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRF
Slug
tiempocom
Published
2023-04-25
Title
Tiempo.com <= 0.1.2 - Reflected XSS
Slug
tier-management-petfinder
Published
2025-11-18
Title
Pet-Manager – Petfinder < 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via kwm-petfinder Shortcode
Slug
tier-pricing-table
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tier-pricing-table
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tiger-form
Published
2023-10-02
Title
Tiger Forms < 2.1.0 - Reflected XSS
Slug
tigris-flexplatform
Published
2024-11-08
Title
Tigris Flexplatform <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tilda-publishing
Published
2023-09-04
Title
Tilda Publishing < 0.3.24 - Subscriber+ Unauthorised Action
Slug
timber-library
Published
2024-05-07
Title
Timber < 1.23.1 - Authenticated (Admin+) PHP Object Injection
Slug
timber-library
Published
2025-07-24
Title
Timber < 1.23.3 - Use of a Vulnerable Dependency
Slug
time-based-greeting
Published
2025-04-24
Title
Time Based Greeting <= 2.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
time-clock
Published
2024-10-18
Title
Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
Slug
time-clock
Published
2025-05-07
Title
Time Clock < 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
time-clock
Published
2025-10-23
Title
Time Clock – A WordPress Employee & Volunteer Time Clock Plugin < 1.3.2 - Authenticated (Custom+) Stored Cross-Site Scripting