WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
td-composer
Published
2023-08-17
Title
tagDiv Composer < 4.2 - Unauthenticated Stored XSS
Slug
td-composer
Published
2023-08-17
Title
tagDiv Composer < 4.2 - Admin+ Stored XSS
Slug
td-composer
Published
2024-06-03
Title
tagDiv Composer < 4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
Slug
td-composer
Published
2024-04-18
Title
tagDiv Composer < 4.9 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
Slug
td-composer
Published
2024-04-18
Title
tagDiv Composer < 4.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Slug
td-composer
Published
2024-08-30
Title
tagDiv Composer < 5.1 - Reflected Cross-Site Scripting via envato_code[]
Slug
td-composer
Published
2024-08-30
Title
tagDiv Composer < 5.1 - Reflected Cross-Site Scripting via envato_code[]
Slug
td-composer
Published
2025-03-27
Title
tagDiv Composer < 5.4 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'
Slug
td-composer
Published
2025-03-27
Title
tagDiv Composer < 5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
td-composer
Published
2025-04-03
Title
TagDiv Composer < 5.4 - Unauthenticated Arbitrary PHP Object Instantiation
Slug
td-composer
Published
2025-05-01
Title
tagDiv Composer < 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
td-composer
Published
2025-05-07
Title
tagDiv Composer < 5.4 - Reflected Cross-Site Scripting via 'data'
Slug
td-composer
Published
2025-10-16
Title
tagDiv Composer < 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
td-composer
Published
2025-10-09
Title
tagDiv Composer < 5.4.2 - Unauthenticated Stored Cross-Site Scripting
Slug
td-subscription
Published
2024-08-16
Title
tagDiv Opt-In Builder < 1.5 - Authenticated (Admin+) SQL Injection
Slug
td-subscription
Published
2024-08-16
Title
tagDiv Opt-In Builder < 1.5 - Authenticated (Admin+) SQL Injection
Slug
td-subscription
Published
2025-04-29
Title
tagDiv Opt-In Builder < 1.7.1 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter
Slug
tdo-mini-forms
Published
2014-08-01
Title
TDO Mini Forms 0.13.9 - tdomf-upload-inline.php File Upload Remote Code Execution
Slug
teachpress
Published
2023-01-17
Title
teachPress < 8.1.9 - Reflected Cross-Site Scripting
Slug
teachpress
Published
2023-06-22
Title
teachPress < 9.0.3 - Reflected Cross-Site Scripting
Slug
teachpress
Published
2023-11-28
Title
teachPress < 9.0.6 - Cross-Site Request Forgery via delete_database()
Slug
teachpress
Published
2023-11-27
Title
teachPress < 9.0.5 - Cross-Site Request Forgery
Slug
teachpress
Published
2025-03-03
Title
teachPress < 9.0.8 - Authenticated (Contributor+) SQL Injection
Slug
teachpress
Published
2025-03-24
Title
teachPress < 9.0.10 - Cross-Site Request Forgery to Import Delete
Slug
teachpress
Published
2025-04-04
Title
teachPress <= 9.0.11 - Authenticated (Contributor+) SQL Injection