WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
trinity-audio
Published
2025-10-03
Title
Trinity Audio < 5.21.0 - Reflected Cross-Site Scripting
Slug
trinity-audio
Published
2025-10-03
Title
Trinity Audio < 5.21.0 - Cross-Site Request Forgery
Slug
trinity-audio
Published
2025-10-10
Title
Trinity Audio < 5.22.0 - Unauthenticated Information Exposure
Slug
trinity-audio
Published
2025-12-12
Title
Trinity Audio < 5.24 - Missing Authorization
Slug
tripadvisor-shortcode
Published
2025-08-25
Title
Tripadvisor Shortcode <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
tripay-payment-gateway
Published
2023-11-23
Title
TriPay Payment Gateway < 3.2.8 - Admin+ Stored XSS
Slug
tripetto
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tripetto
Published
2022-04-26
Title
Tripetto < 5.2.0 - Unauthenticated Stored Cross-Site Scripting
Slug
tripetto
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
tripetto
Published
2024-11-14
Title
Tripetto <= 8.0.6 - Unauthentiated Stored Cross-Site Scripting via Form File Upload
Slug
tripetto
Published
2025-01-06
Title
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto < 8.0.7 - Unauthenticated Stored Cross-Site Scripting
Slug
tripetto
Published
2025-02-04
Title
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto < 8.0.9 - Unauthenticated Sensitive Information Exposure
Slug
tripetto
Published
2025-03-14
Title
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto < 8.0.10 - Unauthenticated Stored Cross-Site Scripting
Slug
tripetto
Published
2025-03-14
Title
Tripetto < 8.0.10 - Cross-Site Request Forgery to Arbitrary Results Deletion
Slug
tripetto
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
triplea-cryptocurrency-payment-gateway-for-woocommerce
Published
2025-11-17
Title
Cryptocurrency Payment Gateway for WooCommerce < 2.0.26 - Missing Authorization to Unauthenticated Tracking Status Update
Slug
tripplan
Published
2024-10-24
Title
Trip Plan < 2.0.0 - Contributor+ Stored XSS
Slug
trivialy
Published
2026-03-01
Title
Make My Trivia <= 1.1.0 - Missing Authorization
Slug
truebooker-appointment-booking
Published
2024-08-17
Title
TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi
Slug
truebooker-appointment-booking
Published
2024-08-17
Title
TrueBooker < 1.0.3 - Settings Update via CSRF
Slug
truebooker-appointment-booking
Published
2025-05-07
Title
TrueBooker < 1.0.8 - Cross-Site Request Forgery
Slug
truebooker-appointment-booking
Published
2025-12-15
Title
TrueBooker < 1.1.1 - Missing Authorization
Slug
truebooker-appointment-booking
Published
2026-03-30
Title
Truebooker - Appointment Booking and Scheduler Plugin < 1.1.5 - Sensitive Information Exposure via Views Files
Slug
truebooker-appointment-booking
Published
2026-02-18
Title
TrueBooker < 1.1.7 - Missing Authorization
Slug
truefy-embed
Published
2025-12-11
Title
Truefy Embed <= 1.1.0 - Cross-Site Request Forgery to 'truefy_embed_options_update' Settings Update