WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
talkjs
Published
2026-02-18
Title
TalkJS < 0.1.16 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'welcomeMessage' Parameter
Slug
tallykit
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
tamara-checkout
Published
2025-01-20
Title
Tamara Checkout < 1.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tangible-loops-and-logic
Published
2024-09-26
Title
Loops & Logic < 4.1.5 - Reflected Cross-Site Scripting
Slug
taobaoke
Published
2025-01-16
Title
WordPress 淘宝客插件 <= 1.1.2 - Reflected Cross-Site Scripting
Slug
tapfiliate
Published
2023-02-15
Title
Tapfiliate < 3.0.13 - Admin+ Stored XSS
Slug
tapfiliate
Published
2025-09-22
Title
Tapfiliate < 3.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
taqnix
Published
2026-04-23
Title
Taqnix < 1.0.4 - Cross-Site Request Forgery to Account Deletion via 'taqnix_delete_my_account' AJAX Action
Slug
target-notifications
Published
2025-01-03
Title
Target Notifications <= 1.1.1 - Reflected Cross-Site Scripting
Slug
targetfirst-wordpress-plugin
Published
2021-05-05
Title
Target First Plugin 2.0 - Unauthenticated Stored XSS via Licence Key
Slug
tariffuxx
Published
2025-10-14
Title
TARIFFUXX < 1.5 - Authenticated (Contributor+) SQL Injection via tariffuxx_configurator Shortcode
Slug
tarteaucitron-wp
Published
2024-10-27
Title
tarteaucitron.js for WordPress < 0.3.0 - Author+ Stored XSS
Slug
tarteaucitron-wp
Published
2024-10-27
Title
tarteaucitron.js for WordPress < 0.3.0 - Stored XSS via CSRF
Slug
tarteaucitronjs
Published
2021-12-09
Title
tarteaucitron.js - Cookies legislation & GDPR < 1.6 - CSRF to Stored Cross-Site Scripting
Slug
tarteaucitronjs
Published
2021-12-17
Title
tarteaucitron.js - Cookies legislation & GDPR < 1.6.1 - Admin + Stored Cross-Site Scripting
Slug
tarteaucitronjs
Published
2025-05-28
Title
tarteaucitron.io < 1.9.5 - Contributor+ Stored XSS
Slug
task-manager
Published
2025-08-29
Title
Task Manager <= 3.0.2 - Unauthenticated Local File Inclusion
Slug
task-manager
Published
2026-03-20
Title
Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Read
Slug
task-manager
Published
2026-03-20
Title
Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'task_id' Parameter
Slug
task-manager-pro
Published
2017-07-19
Title
Task Manager Pro < 3.6.34 - Multiple Cross-Site Scripting
Slug
task-manager-pro
Published
2017-07-19
Title
Task Manager Pro < 3.6.34 - Follower+ SQLi
Slug
task-scheduler
Published
2022-03-01
Title
Folders Disclosure via Outdated jQueryFileTree Library
Slug
task-scheduler
Published
2025-04-09
Title
Task Scheduler <= 1.6.3 - Reflected Cross-Site Scripting
Slug
task-scheduler
Published
2025-10-14
Title
Task Scheduler <= 1.6.3 - Authenticated (Admin+) Blind Server-Side Request Forgery
Slug
taskbot
Published
2025-09-30
Title
Taskbot < 6.5 - Authenticated (Subscriber+) Arbitrary File Deletion