WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-social-media-icons
Published
2023-10-16
Title
Social Media Share Buttons & Social Sharing Icons < 2.8.6 - Arbitrary Settings Update via CSRF
Slug
ultimate-social-media-icons
Published
2023-10-16
Title
Social Media Share Buttons & Social Sharing Icons < 2.8.6 - Subscriber+ Sensitive Information Exposure
Slug
ultimate-social-media-icons
Published
2024-03-27
Title
Social Media Share Buttons < 2.8.9 - Admin+ Stored XSS via settings
Slug
ultimate-social-media-icons
Published
2024-07-06
Title
Social Media & Share Icons < 2.9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ultimate-social-media-icons
Published
2024-04-29
Title
Social Media Share Buttons < 2.9.0 - Admin+ Stored XSS
Slug
ultimate-social-media-plus
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
ultimate-social-media-plus
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ultimate-social-media-plus
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
ultimate-social-media-plus
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
ultimate-social-media-plus
Published
2024-04-29
Title
Social Share Icons & Social Share Buttons < 3.6.3 - Missing Authorization to Notice Dismissal
Slug
ultimate-store-kit
Published
2024-04-08
Title
Ultimate Store Kit Elementor Addons < 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-store-kit
Published
2024-05-07
Title
Ultimate Store Kit Elementor Addons < 2.0.4 - Unauthenticated PHP Object Injection
Slug
ultimate-store-kit
Published
2024-08-20
Title
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider < 2.0.0 - Unauthenticated PHP Object Injection
Slug
ultimate-store-kit
Published
2024-08-16
Title
Ultimate Store Kit Elementor Addons < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-store-kit
Published
2024-08-27
Title
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider < 2.0.4 - Unauthenticated PHP Object Injection
Slug
ultimate-store-kit
Published
2024-09-30
Title
Ultimate Store Kit Elementor Addons < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-store-kit
Published
2024-12-19
Title
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider < 2.3.1 - Missing Authorization
Slug
ultimate-store-kit
Published
2025-04-04
Title
Ultimate Store Kit Elementor Addons < 2.6.0 - Contributor+ Stored XSS
Slug
ultimate-store-kit
Published
2025-04-17
Title
Ultimate Store Kit Elementor Addons < 2.4.1 - Unauthenticated PHP Object Injection
Slug
ultimate-store-kit
Published
2025-04-30
Title
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider < 2.5.0 - Cross-Site Request Forgery to Limited User Meta Update
Slug
ultimate-store-kit
Published
2025-09-22
Title
Ultimate Store Kit Elementor Addons < 2.8.7 - Contributor+ Stored XSS
Slug
ultimate-store-kit
Published
2025-12-30
Title
Ultimate Store Kit Elementor Addons < 2.9.5 - Missing Authorization
Slug
ultimate-subscribe
Published
2025-01-16
Title
Ultimate Subscribe <= 1.3 - Reflected Cross-Site Scripting
Slug
ultimate-tables
Published
2022-11-17
Title
Ultimate Tables <= 1.6.5 - Reflected Cross-Site Scripting
Slug
ultimate-taxonomy-manager
Published
2023-10-16
Title
Ultimate Taxonomy Manager <= 2.0 - Arbitrary Settings Update via CSRF