WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tripetto
Published
2025-01-06
Title
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto < 8.0.7 - Unauthenticated Stored Cross-Site Scripting
Slug
tripetto
Published
2025-02-04
Title
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto < 8.0.9 - Unauthenticated Sensitive Information Exposure
Slug
tripetto
Published
2025-03-14
Title
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto < 8.0.10 - Unauthenticated Stored Cross-Site Scripting
Slug
tripetto
Published
2025-03-14
Title
Tripetto < 8.0.10 - Cross-Site Request Forgery to Arbitrary Results Deletion
Slug
tripetto
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
triplea-cryptocurrency-payment-gateway-for-woocommerce
Published
2025-11-17
Title
Cryptocurrency Payment Gateway for WooCommerce < 2.0.26 - Missing Authorization to Unauthenticated Tracking Status Update
Slug
tripplan
Published
2024-10-24
Title
Trip Plan < 2.0.0 - Contributor+ Stored XSS
Slug
tripzzy
Published
2026-09-18
Title
Tripzzy < 1.5.1 - Unauthenticated Booking Data Tampering
Slug
tripzzy
Published
2026-09-18
Title
Tripzzy < 1.5.1 - Unauthenticated Arbitrary Comment Deletion
Slug
trivialy
Published
2026-03-01
Title
Make My Trivia <= 1.1.0 - Missing Authorization
Slug
truebooker-appointment-booking
Published
2024-08-17
Title
TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi
Slug
truebooker-appointment-booking
Published
2024-08-17
Title
TrueBooker < 1.0.3 - Settings Update via CSRF
Slug
truebooker-appointment-booking
Published
2025-05-07
Title
TrueBooker < 1.0.8 - Cross-Site Request Forgery
Slug
truebooker-appointment-booking
Published
2025-12-15
Title
TrueBooker < 1.1.1 - Missing Authorization
Slug
truebooker-appointment-booking
Published
2026-03-30
Title
Truebooker - Appointment Booking and Scheduler Plugin < 1.1.5 - Sensitive Information Exposure via Views Files
Slug
truebooker-appointment-booking
Published
2026-02-18
Title
TrueBooker < 1.1.7 - Missing Authorization
Slug
truebooker-appointment-booking
Published
2026-06-02
Title
TrueBooker – Appointment Booking and Scheduler System < 1.2.0 - Missing Authorization
Slug
truebooker-appointment-booking
Published
2026-07-07
Title
TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset
Slug
truebooker-appointment-booking
Published
2026-07-16
Title
TrueBooker – Appointment Booking and Scheduler System < 1.2.4 - Unauthenticated SQL Injection
Slug
truebooker-appointment-booking
Published
2026-07-17
Title
TrueBooker < 1.2.4 - Unauthenticated Privilege Escalation
Slug
truebooker-appointment-booking
Published
2026-07-27
Title
TrueBooker < 1.2.3 - Unauthenticated SQL Injection
Slug
truebooker-appointment-booking
Published
2026-08-06
Title
TrueBooker < 1.2.4 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'
Slug
truebooker-appointment-booking
Published
2026-08-14
Title
TrueBooker < 1.2.7 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter
Slug
truebooker-appointment-booking
Published
2026-08-17
Title
TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Customer PII Disclosure via Multiple AJAX Actions
Slug
truebooker-appointment-booking
Published
2026-08-17
Title
TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update_appointment_status