WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
vitepos-lite
Published
2024-04-25
Title
Vitepos < 3.0.2 - Missing Authorization
Slug
vitepos-lite
Published
2025-02-14
Title
Vitepos – Point of sale (POS) < 3.1.4 - Missing Authorization
Slug
vitepos-lite
Published
2025-03-31
Title
Vitepos < 3.1.5 - Missing Authorization
Slug
vitepos-lite
Published
2025-04-17
Title
Vitepos < 3.1.8 - Missing Authorization
Slug
vitepos-lite
Published
2025-11-20
Title
Vitepos – Point of Sale (POS) for WooCommerce < 3.3.1 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution
Slug
vk-all-in-one-expansion-unit
Published
2023-02-03
Title
VK All in One Expansion Unit < 9.86.0.0 - Contributor+ Stored XSS
Slug
vk-all-in-one-expansion-unit
Published
2023-02-23
Title
VK All in One Expansion Unit < 9.87.1.0 - Reflected XSS
Slug
vk-all-in-one-expansion-unit
Published
2023-05-09
Title
VK All in One Expansion Unit < 9.88.2 - Multiple Stored XSS
Slug
vk-all-in-one-expansion-unit
Published
2024-03-25
Title
VK All in One Expansion Unit < 9.97.0.0 - Contributor+ Stored XSS
Slug
vk-all-in-one-expansion-unit
Published
2024-03-26
Title
VK All in One Expansion Unit < 9.96.0.0 - Unauthenticated Password Protected Content Access
Slug
vk-all-in-one-expansion-unit
Published
2024-07-10
Title
VK All in One Expansion Unit < 9.99.2.0 - Contributor+ Stored XSS
Slug
vk-all-in-one-expansion-unit
Published
2025-11-17
Title
VK All in One Expansion Unit < 9.112.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vk-all-in-one-expansion-unit
Published
2025-11-17
Title
VK All in One Expansion Unit < 9.112.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vk-block-patterns
Published
2024-01-19
Title
VK Block Patterns < 1.31.2.0 - Cross-Site Request Forgery
Slug
vk-block-patterns
Published
2024-04-22
Title
VK Block Patterns < 1.31.1.1 - Missing Authorization
Slug
vk-blocks
Published
2023-05-09
Title
VK Blocks < 1.54.0 - Multiple Stored XSS
Slug
vk-blocks
Published
2023-06-02
Title
VK Blocks < 1.57.1.0 - Contributor+ Settings Update via REST API
Slug
vk-blocks
Published
2023-06-02
Title
VK Blocks < 1.58.0.0 - Contributor+ Settings Update via REST API
Slug
vk-blocks
Published
2023-10-24
Title
VK Blocks < 1.64.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block
Slug
vk-blocks
Published
2025-03-06
Title
VK Blocks < 1.95.0.3 - Missing Authorization to Sensitive Information Exposure
Slug
vk-blocks-pro
Published
2023-05-09
Title
VK Blocks < 1.54.0 - Multiple Stored XSS
Slug
vk-filter-search
Published
2023-10-25
Title
VK Filter Search < 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
vk-filter-search
Published
2025-04-04
Title
VK Filter Search <= 2.18.3.0 - Contributor+ Stored XSS
Slug
vk-gallery
Published
2014-08-01
Title
Vk Gallery 1.1.0 - Shell Upload
Slug
vk-google-job-posting-manager
Published
2025-12-15
Title
VK Google Job Posting Manager < 1.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting