WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-social-media-plus
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
ultimate-social-media-plus
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
ultimate-social-media-plus
Published
2024-04-29
Title
Social Share Icons & Social Share Buttons < 3.6.3 - Missing Authorization to Notice Dismissal
Slug
ultimate-store-kit
Published
2024-04-08
Title
Ultimate Store Kit Elementor Addons < 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-store-kit
Published
2024-05-07
Title
Ultimate Store Kit Elementor Addons < 2.0.4 - Unauthenticated PHP Object Injection
Slug
ultimate-store-kit
Published
2024-08-20
Title
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider < 2.0.0 - Unauthenticated PHP Object Injection
Slug
ultimate-store-kit
Published
2024-08-16
Title
Ultimate Store Kit Elementor Addons < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-store-kit
Published
2024-08-27
Title
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider < 2.0.4 - Unauthenticated PHP Object Injection
Slug
ultimate-store-kit
Published
2024-09-30
Title
Ultimate Store Kit Elementor Addons < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-store-kit
Published
2024-12-19
Title
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider < 2.3.1 - Missing Authorization
Slug
ultimate-store-kit
Published
2025-04-04
Title
Ultimate Store Kit Elementor Addons < 2.6.0 - Contributor+ Stored XSS
Slug
ultimate-store-kit
Published
2025-04-17
Title
Ultimate Store Kit Elementor Addons < 2.4.1 - Unauthenticated PHP Object Injection
Slug
ultimate-store-kit
Published
2025-04-30
Title
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider < 2.5.0 - Cross-Site Request Forgery to Limited User Meta Update
Slug
ultimate-store-kit
Published
2025-09-22
Title
Ultimate Store Kit Elementor Addons < 2.8.7 - Contributor+ Stored XSS
Slug
ultimate-store-kit
Published
2025-12-30
Title
Ultimate Store Kit Elementor Addons < 2.9.5 - Missing Authorization
Slug
ultimate-subscribe
Published
2025-01-16
Title
Ultimate Subscribe <= 1.3 - Reflected Cross-Site Scripting
Slug
ultimate-tables
Published
2022-11-17
Title
Ultimate Tables <= 1.6.5 - Reflected Cross-Site Scripting
Slug
ultimate-taxonomy-manager
Published
2023-10-16
Title
Ultimate Taxonomy Manager <= 2.0 - Arbitrary Settings Update via CSRF
Slug
ultimate-taxonomy-manager
Published
2023-10-13
Title
Ultimate Taxonomy Manager <= 2.0 - Reflected XSS
Slug
ultimate-tinymce
Published
2014-08-01
Title
TinyMCE 3.5 - swfupload Cross-Site Scripting
Slug
ultimate-tinymce
Published
2024-10-29
Title
Ultimate TinyMCE <= 5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-twitter-profile-widget
Published
2025-08-23
Title
Ultimate twitter profile widget <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ultimate-under-construction
Published
2024-04-30
Title
Ultimate Under Construction < 1.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ultimate-viral-quiz
Published
2025-10-02
Title
Ultimate Viral Quiz <= 1.0 - Cross-Site Request Forgery to Settings Update
Slug
ultimate-watermark
Published
2025-09-22
Title
Ultimate Watermark < 1.1.1 - Missing Authorization