WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tax-rate-upload
Published
2024-03-29
Title
Tax Rate Upload <= 2.4.5 - Reflected Cross-Site Scripting
Slug
tax-rate-upload
Published
2024-04-15
Title
Tax Rate Upload <= 2.4.5 - Reflected Cross-Site Scripting
Slug
tax-report-for-woocommerce
Published
2025-01-16
Title
Tax Report for WooCommerce <= 2.2 - Reflected Cross-Site Scripting
Slug
tax-switch-for-woocommerce
Published
2025-04-21
Title
Tax Switch for WooCommerce < 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via class-name Parameter
Slug
taxonomy-chain-menu
Published
2025-05-01
Title
Taxonomy Chain Menu < 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode
Slug
taxonomy-discounts-woocommerce
Published
2025-01-24
Title
Taxonomy/Term and Role based Discounts for WooCommerce < 5.2 - Cross-Site Request Forgery to Settings Update
Slug
taxonomy-filter
Published
2023-11-23
Title
Taxonomy filter < 2.2.10 - Settings Update via CSRF
Slug
taxonomy-terms-order
Published
2015-08-18
Title
Category Order & Taxonomy Terms Order < 1.4.6.1 - Authenticated Cross-Site Scripting (XSS)
Slug
taxonomy-terms-order
Published
2018-02-28
Title
Category Order and Taxonomy Terms Order < 1.5.3 - Authenticated PHP Object Injection
Slug
tayori
Published
2025-04-25
Title
Tayori Form <= 1.2.9 - Reflected Cross-Site Scripting
Slug
tb-testimonials
Published
2025-03-12
Title
TBTestimonials <= 1.7.3 - Reflected Cross-Site Scripting
Slug
tc-custom-javascript
Published
2020-07-21
Title
TC Custom JavaScript < 1.2.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
tc-ecommerce
Published
2025-01-06
Title
Themes Coder – Create Android & iOS Apps For Your Woocommerce Site < 1.4.0 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation
Slug
tc-ecommerce
Published
2025-01-27
Title
Themes Coder < 1.4.0 - Unauthenticated SQLi
Slug
tc-logo-slider
Published
2025-12-31
Title
Logo Slider , Logo Carousel , Logo showcase , Client Logo <= 1.8.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
tc-testimonial
Published
2025-08-19
Title
TC Testimonials <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tcbd-auto-refresher
Published
2025-01-10
Title
TCBD Auto Refresher <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tcbd-popover
Published
2024-12-13
Title
TCBD Popover <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tcbd-tooltip
Published
2025-02-20
Title
TCBD Tooltip <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tcd-google-maps
Published
2023-10-22
Title
TCD Google Maps <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
tcs3
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
td-cloud-library
Published
2023-06-19
Title
tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation
Slug
td-cloud-library
Published
2025-10-16
Title
tagDiv Cloud Library < 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
td-composer
Published
2022-10-24
Title
tagDiv Composer < 3.5 - Unauthenticated Account Takeover
Slug
td-composer
Published
2023-04-24
Title
tagDiv Composer < 4.0 - Reflected Cross-site Scripting