WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
uk-cookie
Published
2014-08-01
Title
uk-cookie - Cross-Site Request Forgery (CSRF)
Slug
uk-cookie-consent
Published
2018-04-24
Title
UK Cookie Consent <= 2.3.9 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
uk-cookie-consent
Published
2024-06-06
Title
GDPR/CCPA Cookie Consent Banner < 3.2.1 - Missing Authorization via handle_consent_toggle()
Slug
ukrainian-currency
Published
2024-10-31
Title
Курс валют UAH <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ukuupeople-the-simple-crm
Published
2021-07-05
Title
CRM: Contact Management Simplified – UkuuPeople <= 1.6.3 - Unauthorised Favourite Addition/Deletion
Slug
uleak-security-dashboard
Published
2022-04-02
Title
ULeak Security & Monitoring <= 1.2.3 - Subscriber+ Stored Cross-Site Scripting
Slug
ulimate-client-dash
Published
2025-09-05
Title
Ultimate Client Dash <= 4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ulisting
Published
2021-01-28
Title
uListing < 1.7 - Unauthenticated Arbitrary Account Creation
Slug
ulisting
Published
2021-01-28
Title
uListing < 1.7 - Unauthenticated Arbitrary Account Change
Slug
ulisting
Published
2021-01-28
Title
uListing < 1.7 - Unauthenticated WordPress Options Change
Slug
ulisting
Published
2021-01-28
Title
uListing < 1.7 - Unauthenticated Information Disclosure
Slug
ulisting
Published
2021-01-28
Title
uListing < 1.7 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion
Slug
ulisting
Published
2021-01-28
Title
uListing < 1.7 - Unauthenticated SQL Injections
Slug
ulisting
Published
2021-01-28
Title
uListing < 1.7 - Unauthenticated Arbitrary Post/Page Deletion
Slug
ulisting
Published
2021-07-26
Title
uListing < 2.0.4 - Unauthenticated SQL Injection
Slug
ulisting
Published
2021-07-27
Title
uListing < 2.0.6 - Settings Update via CSRF
Slug
ulisting
Published
2021-07-27
Title
uListing < 2.0.6 - Authenticated IDOR
Slug
ulisting
Published
2021-07-27
Title
uListing < 2.0.6 - Reflected Cross-Site Scripting
Slug
ulisting
Published
2021-07-27
Title
uListing < 2.0.6 - Multiple CSRF
Slug
ulisting
Published
2021-07-27
Title
uListing < 2.0.6 - Modify User Roles via CSRF
Slug
ulisting
Published
2021-07-27
Title
uListing < 2.0.6 - Unauthenticated Privilege Escalation
Slug
ulisting
Published
2021-09-06
Title
uListing < 2.0.9 - Arbitrary Blog Option Update via CSRF
Slug
ulisting
Published
2021-01-28
Title
uListing < 1.7 - Missing Access Controls
Slug
ulisting
Published
2024-09-27
Title
uListing < 2.1.6 - Unauthenticated Information Exposure
Slug
ulisting
Published
2025-02-03
Title
uListing < 2.1.7 - Unauthenticated SQL Injection