WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-member
Published
2025-12-16
Title
Ultimate Member < 2.11.1 - Authenticated (Subscriber+) Profile Privacy Setting Bypass
Slug
ultimate-member
Published
2025-12-20
Title
Ultimate Member < 2.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
ultimate-member
Published
2025-12-19
Title
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin < 2.11.1 - Unauthenticated Sensitive Information Exposure
Slug
ultimate-member
Published
2026-02-17
Title
Ultimate Member < 2.11.2 - Reflected Cross-Site Scripting via Filter Parameters
Slug
ultimate-member-widgets-for-elementor
Published
2025-11-19
Title
Ultimate Member Widgets for Elementor < 2.4 - Missing Authorization to Unauthenticated Information Exposure
Slug
ultimate-member-widgets-for-elementor
Published
2025-11-27
Title
Ultimate Member Widgets for Elementor < 2.4 - Unauthenticated Information Exposure
Slug
ultimate-multi-design-video-carousel
Published
2025-10-02
Title
Ultimate Multi Design Video Carousel <= 1.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
ultimate-noindex-nofollow-tool
Published
2024-01-23
Title
Ultimate Noindex Nofollow Tool <= 1.1.2 - Settings Update via CSRF
Slug
ultimate-noindex-nofollow-tool-ii
Published
2023-04-13
Title
Ultimate Noindex Nofollow Tool II < 1.3.4 - Settings Update via CSRF
Slug
ultimate-noindex-nofollow-tool-ii
Published
2024-02-03
Title
Ultimate Noindex Nofollow Tool II < 1.3.6 - Admin+ Stored XSS
Slug
ultimate-popup-creator
Published
2025-01-06
Title
Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Unauthenticated SQL Injection
Slug
ultimate-popup-creator
Published
2025-01-06
Title
Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Missing Authorization to Unauthenticated DB Table Truncation
Slug
ultimate-post
Published
2021-08-26
Title
PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure
Slug
ultimate-post
Published
2021-08-26
Title
PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Contributor+ Stored Cross-Site Scripting
Slug
ultimate-post
Published
2021-08-17
Title
PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls
Slug
ultimate-post
Published
2021-08-26
Title
PostX Gutenberg Blocks for Post Grid < 2.4.10 - Contributor+ Stored Cross-Site Scripting
Slug
ultimate-post
Published
2023-08-02
Title
PostX - Gutenberg Post Grid Blocks < 3.0.6 - Reflected Cross-Site Scripting
Slug
ultimate-post
Published
2023-06-23
Title
PostX - Gutenberg Blocks for Post Grid < 2.9.10 - Reflected Cross-Site Scripting
Slug
ultimate-post
Published
2024-04-05
Title
PostX – Gutenberg Blocks for Post Grid < 3.2.4 - Incorrect Authorization
Slug
ultimate-post
Published
2024-04-22
Title
PostX < 4.0.2 - Contributor+ Stored XSS
Slug
ultimate-post
Published
2024-04-16
Title
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX < 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-post
Published
2024-05-27
Title
PostX < 4.1.0 - Contributor+ Stored XSS
Slug
ultimate-post
Published
2024-05-29
Title
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX < 4.1.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
ultimate-post
Published
2024-05-29
Title
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX < 4.1.3 - Missing Authorization to Arbitrary Options Update
Slug
ultimate-post
Published
2024-05-27
Title
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX < 4.1.0 - Authenticated (Contributor+) Stored Cross=Site Scripting