WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
theplus_elementor_addon
Published
2021-03-08
Title
The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass
Slug
theplus_elementor_addon
Published
2021-05-31
Title
The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)
Slug
theplus_elementor_addon
Published
2021-05-31
Title
The Plus Addons for Elementor Page Builder < 4.1.11 - Arbitrary Reset Pwd Email Sending
Slug
theplus_elementor_addon
Published
2021-05-31
Title
The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect
Slug
theplus_elementor_addon
Published
2021-12-13
Title
The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure
Slug
theplus_elementor_addon
Published
2021-12-13
Title
The Plus Addons for Elementor Pro < 5.0.7 - Unauthenticated SQL Injection
Slug
theplus_elementor_addon
Published
2023-10-31
Title
The Plus Addons for Elementor Pro < 5.2.9 - Unauthenticated Local File Inclusion
Slug
theplus_elementor_addon
Published
2024-05-29
Title
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce < 5.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget
Slug
theplus_elementor_addon
Published
2024-06-20
Title
The Plus Addons for Elementor Page Builder < 5.6.0 - Reflected Cross-Site Scripting via WP Login and Register Widget
Slug
theplus_elementor_addon
Published
2024-06-20
Title
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce < 5.6.0 - Authenticated (Contributor+) Local File Inclusion
Slug
theplus_elementor_addon
Published
2025-05-20
Title
The Plus Addons for Elementor Pro < 6.3.7 - Missing Authorization
Slug
theplus_elementor_addon
Published
2025-07-16
Title
The Plus Addons for Elementor Pro < 6.3.7 - Missing Authorization
Slug
thesis-openhook
Published
2023-09-29
Title
OpenHook < 4.3.1 - Subscriber+ Remote Code Execution
Slug
thesis-openhook
Published
2025-12-31
Title
OpenHook <= 4.3.1 - Cross-Site Request Forgery
Slug
thesography
Published
2023-09-03
Title
Exifography <= 1.3.1 - Admin+ Stored XSS
Slug
thethe-layout-grid
Published
2014-08-01
Title
thethe-layout-grid <= 1.0.0 - XSS in ZeroClipboard.
Slug
thim-blocks
Published
2026-01-16
Title
Gutenberg Thim Blocks < 1.0.2 - Authenticated (Contributor+) Arbitrary File Read via 'iconSVG' Parameter
Slug
thim-core
Published
2025-08-14
Title
Thim Core <= 2.3.3 - Missing Authorization
Slug
thim-core
Published
2025-08-14
Title
Thim Core <= 2.3.3 - Cross-Site Request Forgery
Slug
thim-core
Published
2026-08-13
Title
Thim Core <= 2.5.1 - Subscriber+ Remote Code Execution
Slug
thim-elementor-kit
Published
2024-05-10
Title
Thim Elementor Kit < 1.1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
thim-elementor-kit
Published
2024-05-06
Title
Thim Elementor Kit < 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
thim-elementor-kit
Published
2025-01-06
Title
Thim Elementor Kit < 1.2.9.1 - Contributor+ Stored XSS
Slug
thim-elementor-kit
Published
2025-01-24
Title
Thim Elementor Kit < 1.2.9 - Missing Authorization
Slug
thim-elementor-kit
Published
2025-12-06
Title
Thim Elementor Kit < 1.3.4 - Authenticated (Contributor+) Insecure Direct Object Reference