WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tagregator
Published
2018-05-05
Title
Tagregator <= 0.6 - Stored XSS
Slug
tags-cloud-manager
Published
2023-03-14
Title
Tags Cloud Manager <= 1.0.0 - Reflected XSS
Slug
tags-to-meta-keywords
Published
2025-01-31
Title
Tags to Keywords < 1.0.2 - Cross-Site Request Forgery to Stored Cross-site Scripting
Slug
tailored-tools
Published
2024-11-20
Title
Tailored Tools <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tailpress
Published
2025-04-03
Title
TailPress <= 0.4.4 - Unauthenticated Sensitive Information Exposure
Slug
tainacan
Published
2023-11-20
Title
Tainacan < 0.20.5 - Reflected Cross-Site Scripting
Slug
tainacan
Published
2024-02-26
Title
Tainacan < 0.20.7 - Unauthenticated Sensitive Information Exposure
Slug
tainacan
Published
2024-03-29
Title
Tainacan < 0.20.8 - Missing Authorization
Slug
tainacan
Published
2024-05-20
Title
Tainacan < 0.21.4 - Unauthenticated Stored Cross-Site Scripting
Slug
tainacan
Published
2024-05-20
Title
Tainacan < 0.21.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tainacan
Published
2024-07-30
Title
Tainacan < 0.21.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Slug
tainacan
Published
2024-10-10
Title
Tainacan < 0.21.11 - Reflected Cross-Site Scripting
Slug
tainacan
Published
2024-10-09
Title
Tainacan < 0.21.9 - Authenticated (Subscriber+) SQL Injection
Slug
tainacan
Published
2025-01-22
Title
Tainacan < 0.21.13 - Authenticated (Subscriber+) SQL Injection
Slug
tainacan
Published
2025-05-16
Title
Tainacan < 0.21.15 - Unauthenticated Arbitrary File Deletion
Slug
tainacan
Published
2025-11-20
Title
Tainacan < 1.0.1 - Reflected Cross-Site Scripting
Slug
tainacan
Published
2025-11-20
Title
Tainacan < 1.0.1 - Unauthenticated Information Exposure
Slug
tainacan
Published
2025-12-20
Title
Tainacan < 1.0.2 - Missing Authorization to Unauthenticated Arbitrary Metadata Section Creation
Slug
tajer
Published
2018-10-15
Title
Tajer - Unauthenticated Arbitrary File Upload
Slug
taketin-to-wp-membership
Published
2024-10-14
Title
TAKETIN To WP Membership <= 2.8.17 - Subscriber+ PHP Object Injection
Slug
talkback-secure-linkback-protocol
Published
2024-10-09
Title
Talkback <= 1.0 - Unauthenticated PHP Object Injection
Slug
talkjs
Published
2026-02-18
Title
TalkJS < 0.1.16 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'welcomeMessage' Parameter
Slug
tallykit
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
tamara-checkout
Published
2025-01-20
Title
Tamara Checkout < 1.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tangible-loops-and-logic
Published
2024-09-26
Title
Loops & Logic < 4.1.5 - Reflected Cross-Site Scripting