WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tutor-lms-migration-tool
Published
2024-07-26
Title
Tutor LMS – Migration Tool <= 2.2.2 - Missing Authorization in tutor_lp_export_xml
Slug
tutor-pro
Published
2024-05-15
Title
Tutor LMS Pro < 2.7.1 - Missing Authorization to Privilege Escalation
Slug
tutor-pro
Published
2024-05-15
Title
Tutor LMS Pro < 2.7.1 - Missing Authorization
Slug
tutor-pro
Published
2024-05-15
Title
Tutor LMS Pro < 2.7.1 - Missing Authorization to SQL Injection
Slug
tutor-pro
Published
2024-08-29
Title
Tutor LMS Pro < 2.7.3 - Missing Authorization to Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
tutor-pro
Published
2025-08-12
Title
Tutor LMS Pro – eLearning and online course solution < 3.7.1 - Authenticated (Tutor Instructor+) SQL Injection
Slug
tutor-pro
Published
2025-10-24
Title
Tutor LMS Pro < 3.9.0 - Subscriber+ Other Assignments Access/Edit via IDOR
Slug
tutor-pro
Published
2026-01-13
Title
Tutor LMS Pro < 3.9.7 - Unauthenticated SQL Injection
Slug
tutor-pro
Published
2026-03-09
Title
Tutor LMS Pro < 3.9.6 - Authentication Bypass via Social Login
Slug
tutor-pro
Published
2026-03-23
Title
Tutor LMS Pro < 3.9.9 - Missing Authorization
Slug
tuturn
Published
2025-10-15
Title
Tuturn < 3.6 - Authenticated (Subscriber+) Arbitrary File Download
Slug
tuturn
Published
2025-10-15
Title
Tuturn < 3.6 - Unauthenticated Missing Authorization
Slug
tuxedo-big-file-uploads
Published
2023-11-14
Title
Big File Uploads < 2.1.2 - Cross-Site Request Forgery via actions
Slug
tuxedo-big-file-uploads
Published
2024-09-06
Title
Big File Uploads < 2.1.3 - Authenticated (Author+) Full Path Disclosure
Slug
tw-image-hover-share
Published
2025-12-04
Title
Quantic Social Image Hover <= 1.0.8 - Cross-Site Request Forgery to Settings Update
Slug
tw-whatsapp-chat-rotator
Published
2025-09-18
Title
WhatsApp Chat for WordPress and WooCommerce <= 1.2.1 - Reflected Cross-Site Scripting
Slug
twb-woocommerce-reviews
Published
2023-11-07
Title
TWB Woocommerce Reviews < 1.7.6 - Admin+ Stored XSS
Slug
twb-woocommerce-reviews
Published
2025-03-27
Title
TWB Woocommerce Reviews < 1.7.8 - Cross-Site Request Forgery
Slug
twchat
Published
2021-10-05
Title
Two Way Chat < 3.1.5 - Admin+ Local File Inclusion
Slug
twchat
Published
2021-10-05
Title
Two Way Chat < 3.1.5 - Multiple CSRF
Slug
twchat
Published
2024-12-06
Title
TWChat – Send or receive messages from users <= 4.0.4 - Reflected Cross-Site Scripting
Slug
tweeple
Published
2023-10-18
Title
Tweeple <= 0.9.5 - Reflected XSS
Slug
tweet-blender
Published
2014-08-01
Title
Tweet Blender 4.0.1 - Unspecified XSS
Slug
tweet-old-custom-post
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
tweet-old-post
Published
2011-09-05
Title
Tweet Old Post <= 3.2.5 - Authenticated SQL Injection