WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
td-subscription
Published
2024-08-16
Title
tagDiv Opt-In Builder < 1.5 - Authenticated (Admin+) SQL Injection
Slug
td-subscription
Published
2025-04-29
Title
tagDiv Opt-In Builder < 1.7.1 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter
Slug
tdo-mini-forms
Published
2014-08-01
Title
TDO Mini Forms 0.13.9 - tdomf-upload-inline.php File Upload Remote Code Execution
Slug
teachpress
Published
2023-01-17
Title
teachPress < 8.1.9 - Reflected Cross-Site Scripting
Slug
teachpress
Published
2023-06-22
Title
teachPress < 9.0.3 - Reflected Cross-Site Scripting
Slug
teachpress
Published
2023-11-28
Title
teachPress < 9.0.6 - Cross-Site Request Forgery via delete_database()
Slug
teachpress
Published
2023-11-27
Title
teachPress < 9.0.5 - Cross-Site Request Forgery
Slug
teachpress
Published
2025-03-03
Title
teachPress < 9.0.8 - Authenticated (Contributor+) SQL Injection
Slug
teachpress
Published
2025-03-24
Title
teachPress < 9.0.10 - Cross-Site Request Forgery to Import Delete
Slug
teachpress
Published
2025-04-04
Title
teachPress < 9.0.12 - Authenticated (Contributor+) SQL Injection
Slug
teachpress
Published
2026-01-06
Title
teachPress <= 9.0.12 - Cross-Site Request Forgery
Slug
teachpress
Published
2025-12-30
Title
teachPress <= 9.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tealium
Published
2025-06-19
Title
Tealium < 2.1.21 - Admin+ Stored XSS
Slug
team
Published
2020-10-05
Title
Post Grid < 2.0.73 & Team Showcase < 1.22.16 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
team
Published
2020-10-05
Title
Post Grid < 2.0.73 & Team Showcase < 1.22.16 - PHP Object Injection
Slug
team
Published
2024-08-16
Title
Team Showcase < 1.22.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
team
Published
2024-09-16
Title
Team Showcase < 1.22.26 - Reflected Cross-Site Scripting
Slug
team-118group-agent
Published
2025-01-16
Title
Team 118GROUP Agent <= 1.6.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Slug
team-builder-for-wpbakery-page-builder
Published
2025-02-18
Title
Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
team-builder-for-wpbakery-page-builder
Published
2025-02-18
Title
Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Local File Inclusion
Slug
team-display
Published
2025-02-17
Title
Team Builder – Meet the Team <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
team-display
Published
2025-04-03
Title
Team Builder <= 1.3 - Reflected Cross-Site Scripting
Slug
team-members
Published
2020-05-16
Title
Team Members < 5.0.4 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
team-members
Published
2022-05-09
Title
Team Members < 5.1.1 - Admin+ Stored Cross-Site Scripting
Slug
team-members
Published
2022-12-09
Title
Team Members < 5.2.1 - Editor+ Stored XSS