WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ticket-help-desk-system-lite
Published
2025-04-02
Title
Support Helpdesk Ticket System Lite <= 4.5.2 - Reflected Cross-Site Scripting
Slug
ticket-manager
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
ticket-spot
Published
2025-10-02
Title
Event Tickets, RSVPs, Calendar < 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ticket-tailor
Published
2024-03-15
Title
Ticket Tailor < 1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ticketsource-events
Published
2024-12-19
Title
Sell Tickets Online – TicketSource Ticket Shop for WordPress < 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tida-url-screenshot
Published
2024-10-21
Title
Tida URL Screenshot < 1.0.2 - Reflected Cross-Site Scripting
Slug
tidekey
Published
2025-03-27
Title
Tidekey <= 1.1 - Reflected Cross-Site Scripting
Slug
tidio-form
Published
2016-04-12
Title
Easy Contact Form Builder <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
tidio-gallery
Published
2016-04-12
Title
Tidio Gallery <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
tidio-live-chat
Published
2019-11-05
Title
Tidio Live Chat < 4.2.0 - CSRF to Stored XSS
Slug
tidy-up
Published
2024-12-16
Title
Tidy Up <= 1.3 - Cross-Site Request Forgery
Slug
tidyro
Published
2025-01-16
Title
Tidy.ro <= 1.3 - Reflected Cross-Site Scripting
Slug
tiempocom
Published
2023-04-25
Title
Tiempo.com <= 0.1.2 - Stored XSS via CSRF
Slug
tiempocom
Published
2023-04-25
Title
Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRF
Slug
tiempocom
Published
2023-04-25
Title
Tiempo.com <= 0.1.2 - Reflected XSS
Slug
tier-management-petfinder
Published
2025-11-18
Title
Pet-Manager – Petfinder < 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via kwm-petfinder Shortcode
Slug
tier-pricing-table
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tier-pricing-table
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tiger-form
Published
2023-10-02
Title
Tiger Forms < 2.1.0 - Reflected XSS
Slug
tigris-flexplatform
Published
2024-11-08
Title
Tigris Flexplatform <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tiktok-for-business
Published
2026-09-18
Title
TikTok 1.2.0 - 1.4.1 - Unauthenticated OAuth Code Redemption
Slug
tiktok-for-business
Published
2026-09-18
Title
TikTok < 1.4.2 - Missing Authorization to Unauthenticated TikTok Integration Takeover via 'auth_code' Parameter
Slug
tilda-publishing
Published
2023-09-04
Title
Tilda Publishing < 0.3.24 - Subscriber+ Unauthorised Action
Slug
tiled-gallery-carousel-without-jetpack
Published
2026-06-01
Title
Tiled Gallery Carousel Without JetPack <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-title'
Slug
timber-library
Published
2024-05-07
Title
Timber < 1.23.1 - Authenticated (Admin+) PHP Object Injection