WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-category-excluder
Published
2020-12-11
Title
Ultimate Category Excluder < 1.2 - Cross-Site Request Forgery
Slug
ultimate-classified-listings
Published
2024-07-08
Title
Ultimate Classified Listings < 1.3 - Reflected XSS
Slug
ultimate-classified-listings
Published
2024-07-08
Title
Ultimate Classified Listings < 1.3 - Unauthenticated LFI
Slug
ultimate-classified-listings
Published
2024-07-11
Title
Ultimate Classified Listings < 1.4 - Reflected XSS
Slug
ultimate-classified-listings
Published
2024-11-18
Title
Ultimate Classified Listings <= 1.7 - Contributor+ Local File Inclusion
Slug
ultimate-classified-listings
Published
2024-11-19
Title
Ultimate Classified Listings <= 1.7 - Subscriber+ Stored XSS
Slug
ultimate-classified-listings
Published
2025-02-19
Title
Ultimate Classified Listings < 1.6 - Cross-Site Request Forgery to Account Takeover
Slug
ultimate-classified-listings
Published
2025-02-19
Title
Ultimate Classified Listings < 1.5 Authenticated (Administrator+) Stored Cross-Site Scripting via Title Parameter
Slug
ultimate-classified-listings
Published
2025-09-10
Title
Ultimate Classified Listings <= 1.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
Slug
ultimate-classified-listings
Published
2025-09-10
Title
Ultimate Classified Listings < 1.7 - Authenticated (Contributor+) Local File Inclusion
Slug
ultimate-coming-soon
Published
2024-12-05
Title
Ultimate Coming Soon & Maintenance < 1.1.0 - Subscriber+ Template Name Update
Slug
ultimate-coming-soon
Published
2024-12-05
Title
Ultimate Coming Soon & Maintenance < 1.1.0 - Unauthenticated Template Activation
Slug
ultimate-coming-soon
Published
2025-01-24
Title
Ultimate Coming Soon & Maintenance < 1.1.0 - Cross-Site Request Forgery
Slug
ultimate-custom-scrollbar
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ultimate-dashboard
Published
2023-05-23
Title
Ultimate Dashboard < 3.7.6 - Admin+ Stored XSS
Slug
ultimate-dashboard
Published
2023-11-13
Title
Ultimate Dashboard < 3.7.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Slug
ultimate-dashboard
Published
2023-12-05
Title
Ultimate Dashboard < 3.7.11 - Login Page Disclosure on Multi-site
Slug
ultimate-dashboard
Published
2023-12-19
Title
Ultimate Dashboard < 3.7.12 - Admin+ Stored XSS
Slug
ultimate-dashboard
Published
2025-03-25
Title
Ultimate Dashboard < 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation
Slug
ultimate-dashboard
Published
2025-03-27
Title
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
Slug
ultimate-dashboard
Published
2025-03-27
Title
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
Slug
ultimate-dashboard
Published
2025-03-27
Title
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
Slug
ultimate-downloadable-products-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ultimate-elementor
Published
2019-12-12
Title
Ultimate Addons for Elementor < 1.20.1 - Authentication Bypass
Slug
ultimate-elementor
Published
2020-05-07
Title
Ultimate Addons for Elementor < 1.24.2 - Registration Bypass