WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
thumbnail-editor
Published
2025-06-27
Title
Thumbnail Editor <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thumbnail-grid
Published
2025-03-11
Title
Featured Image Thumbnail Grid < 6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thumbs-rating
Published
2024-03-29
Title
Thumbs Rating <= 5.1.0 - Unauthenticated Insecure Direct Object Reference
Slug
ti-woocommerce-wishlist
Published
2020-10-16
Title
TI WooCommerce Wishlist - Authenticated WP Options Change
Slug
ti-woocommerce-wishlist
Published
2022-01-31
Title
TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection
Slug
ti-woocommerce-wishlist
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ti-woocommerce-wishlist
Published
2024-08-22
Title
TI WooCommerce Wishlist < 2.9.0 - Unauthenticated SQL Injection
Slug
ti-woocommerce-wishlist
Published
2024-09-19
Title
TI WooCommerce Wishlist < 2.9.1 - Unauthenticated SQL Injection via lang parameters
Slug
ti-woocommerce-wishlist
Published
2024-12-03
Title
TI WooCommerce Wishlist < 2.9.2 - Unauthenticated Plugin Setup Wizard Access
Slug
ti-woocommerce-wishlist
Published
2025-05-15
Title
TI WooCommerce Wishlist < 2.10.0 - Contributor+ Stored XSS
Slug
ti-woocommerce-wishlist
Published
2025-05-16
Title
TI WooCommerce Wishlist < 2.10.0 - Unauthenticated Arbitrary File Upload
Slug
ti-woocommerce-wishlist
Published
2025-09-22
Title
TI WooCommerce Wishlist < 2.11.0 - Missing Authorization
Slug
ti-woocommerce-wishlist
Published
2025-12-12
Title
TI WooCommerce Wishlist < 2.11.0 - Unauthenticated HTML Injection
Slug
ti-woocommerce-wishlist
Published
2025-11-21
Title
TI WooCommerce Wishlist < 2.11.0 - Missing Authorization
Slug
ti-woocommerce-wishlist-premium
Published
2020-10-16
Title
TI WooCommerce Wishlist - Authenticated WP Options Change
Slug
ti-woocommerce-wishlist-premium
Published
2022-01-31
Title
TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection
Slug
tiare-membership
Published
2025-11-26
Title
Tiare Membership < 1.3 - Unauthenticated Privilege Escalation
Slug
ticker-ultimate
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Slug
tickera-event-ticketing-system
Published
2020-04-11
Title
Tickera WordPress Event Ticketing < 3.4.6.9 - Unauthenticated Sensitive Data Exposure
Slug
tickera-event-ticketing-system
Published
2021-11-23
Title
Tickera < 3.4.8.3 - Unauthenticated Stored Cross-Site Scripting
Slug
tickera-event-ticketing-system
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tickera-event-ticketing-system
Published
2022-12-23
Title
Tickera < 3.5.1.0 - Plugin Data Deletion via CSRF
Slug
tickera-event-ticketing-system
Published
2024-04-01
Title
Tickera < 3.5.2.5 - Ticket leakage through IDOR
Slug
tickera-event-ticketing-system
Published
2024-06-06
Title
Tickera < 3.5.2.7 - Missing Authorization
Slug
tickera-event-ticketing-system
Published
2024-06-17
Title
Tickera < 3.5.2.9 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion