WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tainacan
Published
2024-07-30
Title
Tainacan < 0.21.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Slug
tainacan
Published
2024-10-10
Title
Tainacan < 0.21.11 - Reflected Cross-Site Scripting
Slug
tainacan
Published
2024-10-09
Title
Tainacan < 0.21.9 - Authenticated (Subscriber+) SQL Injection
Slug
tainacan
Published
2025-01-22
Title
Tainacan < 0.21.13 - Authenticated (Subscriber+) SQL Injection
Slug
tainacan
Published
2025-05-16
Title
Tainacan < 0.21.15 - Unauthenticated Arbitrary File Deletion
Slug
tainacan
Published
2025-11-20
Title
Tainacan < 1.0.1 - Reflected Cross-Site Scripting
Slug
tainacan
Published
2025-11-20
Title
Tainacan < 1.0.1 - Unauthenticated Information Exposure
Slug
tainacan
Published
2025-12-20
Title
Tainacan < 1.0.2 - Missing Authorization to Unauthenticated Arbitrary Metadata Section Creation
Slug
tainacan
Published
2026-05-28
Title
Tainacan < 1.1.0 - Unauthenticated SQL Injection
Slug
tainacan
Published
2026-07-07
Title
Tainacan < 1.1.0 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter
Slug
tainacan
Published
2026-09-23
Title
Tainacan < 1.3.0 - Authenticated (Subscriber+) SQL Injection
Slug
tajer
Published
2018-10-15
Title
Tajer - Unauthenticated Arbitrary File Upload
Slug
taketin-to-wp-membership
Published
2024-10-14
Title
TAKETIN To WP Membership <= 3.0.4 - Subscriber+ PHP Object Injection
Slug
talkback-secure-linkback-protocol
Published
2024-10-09
Title
Talkback <= 1.0 - Unauthenticated PHP Object Injection
Slug
talkjs
Published
2026-02-18
Title
TalkJS < 0.1.16 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'welcomeMessage' Parameter
Slug
tallykit
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
tamara-checkout
Published
2025-01-20
Title
Tamara Checkout < 1.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tamara-checkout
Published
2026-08-18
Title
Tamara Checkout <= 1.9.9.23 - Unauthenticated Order Status Manipulation
Slug
tangible-loops-and-logic
Published
2024-09-26
Title
Loops & Logic < 4.1.5 - Reflected Cross-Site Scripting
Slug
tangible-loops-and-logic
Published
2026-07-08
Title
Loops & Logic < 4.2.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
tangible-loops-and-logic
Published
2026-09-07
Title
Loops & Logic < 4.3.0 - Unauthenticated User Data and Site Option Disclosure
Slug
tangible-loops-and-logic
Published
2026-08-28
Title
Loops & Logic <= 4.3.1 - Reflected Cross-Site Scripting
Slug
tangible-loops-and-logic
Published
2026-09-23
Title
Tangible: Loops & Logic < 4.3.0 - Missing Authorization
Slug
taobaoke
Published
2025-01-16
Title
WordPress 淘宝客插件 <= 1.1.2 - Reflected Cross-Site Scripting
Slug
tapfiliate
Published
2023-02-15
Title
Tapfiliate < 3.0.13 - Admin+ Stored XSS