WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ultimate-coming-soon
Published
2024-12-05
Title
Ultimate Coming Soon & Maintenance < 1.1.0 - Unauthenticated Template Activation
Slug
ultimate-coming-soon
Published
2025-01-24
Title
Ultimate Coming Soon & Maintenance < 1.1.0 - Cross-Site Request Forgery
Slug
ultimate-custom-scrollbar
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ultimate-dashboard
Published
2023-05-23
Title
Ultimate Dashboard < 3.7.6 - Admin+ Stored XSS
Slug
ultimate-dashboard
Published
2023-11-13
Title
Ultimate Dashboard < 3.7.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Slug
ultimate-dashboard
Published
2023-12-05
Title
Ultimate Dashboard < 3.7.11 - Login Page Disclosure on Multi-site
Slug
ultimate-dashboard
Published
2023-12-19
Title
Ultimate Dashboard < 3.7.12 - Admin+ Stored XSS
Slug
ultimate-dashboard
Published
2025-03-25
Title
Ultimate Dashboard < 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation
Slug
ultimate-dashboard
Published
2025-03-27
Title
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
Slug
ultimate-dashboard
Published
2025-03-27
Title
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
Slug
ultimate-dashboard
Published
2025-03-27
Title
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
Slug
ultimate-downloadable-products-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ultimate-elementor
Published
2019-12-12
Title
Ultimate Addons for Elementor < 1.20.1 - Authentication Bypass
Slug
ultimate-elementor
Published
2020-05-07
Title
Ultimate Addons for Elementor < 1.24.2 - Registration Bypass
Slug
ultimate-elementor
Published
2021-04-13
Title
Ultimate Addons for Elementor < 1.30.0 - Contributor+ Stored XSS
Slug
ultimate-elementor
Published
2024-07-01
Title
Ultimate Addons for Elementor < 1.36.32 - Authenticated (Contributor+) Privilege Escalation
Slug
ultimate-events
Published
2025-01-16
Title
Ultimate Events <= 1.3.3 - Reflected Cross-Site Scripting
Slug
ultimate-facebook-comments
Published
2024-03-29
Title
Ultimate Social Comments – Email Notification & Lazy Load <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ultimate-faqs
Published
2019-05-08
Title
Ultimate Faqs < 1.8.22 - Cross-Site Scripting (XSS)
Slug
ultimate-faqs
Published
2019-09-20
Title
Ultimate FAQ < 1.8.25 - Unauthenticated Options Import/Export
Slug
ultimate-faqs
Published
2020-01-06
Title
Ultimate FAQ < 1.8.30 - Unauthenticated Reflected XSS
Slug
ultimate-faqs
Published
2021-12-27
Title
Ultimate FAQ < 2.1.2 - Subscriber+ Arbitrary FAQ Creation
Slug
ultimate-faqs
Published
2025-11-08
Title
Ultimate FAQ < 2.4.4 - Cross-Site Request Forgery
Slug
ultimate-faqs
Published
2026-04-08
Title
Ultimate FAQ Accordion Plugin < 2.4.8 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ Content
Slug
ultimate-flipbox-addon-for-elementor
Published
2024-11-08
Title
Ultimate Flipbox Addon for Elementor 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting