WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
vk-poster-group
Published
2024-02-09
Title
VK Poster Group <= 2.0.3 - Reflected Cross-Site Scripting via vkp_repost
Slug
vkontakte-api
Published
2014-08-01
Title
vkontakte-api - vkontakte-api/swf/tagcloud.swf tagcloud Parameter XSS
Slug
vkontakte-cross-post
Published
2025-04-09
Title
VKontakte Cross-Post <= 0.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
vkontakte-wall-post
Published
2024-10-15
Title
VKontakte Wall Post <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
vm-backups
Published
2021-03-13
Title
VM Backups <= 1.0 - CSRF to Database Backup Download
Slug
vm-backups
Published
2021-03-13
Title
VM Backups <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)
Slug
vm-menu-reorder
Published
2025-09-26
Title
VM Menu Reorder plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update
Slug
vmax-project-manager
Published
2024-09-24
Title
Vmax Project Manager <= 1.0 - Unauthenticated Local File Inclusion
Slug
vn-calendar
Published
2014-11-14
Title
VN-Calendar <= 1.0 - Multiple Cross-Site Scripting (XSS)
Slug
vnpay-for-woocommerce
Published
2025-10-23
Title
VNPAY for Woocommerce <= 1.0.0 - Reflected Cross-Site Scripting
Slug
vo-locator-the-wp-store-locator
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
vo-locator-the-wp-store-locator
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
vod-infomaniak
Published
2024-04-25
Title
VOD Infomaniak < 1.5.7 - Reflected Cross-Site Scripting
Slug
vod-infomaniak
Published
2024-10-14
Title
VOD Infomaniak < 1.5.8 - Cross-Site Request Forgery
Slug
vod-infomaniak
Published
2025-01-14
Title
VOD Infomaniak < 1.5.10 - Missing Authorization
Slug
vod-infomaniak
Published
2025-09-23
Title
VOD Infomaniak < 1.5.12 - Unauthenticated Stored Cross-Site Scripting
Slug
vodpod-video-gallery
Published
2010-11-05
Title
Vodpod Video Gallery <= 3.1.7 - Cross-Site Scripting (XSS)
Slug
voice-feedback
Published
2025-10-16
Title
Voice Feedback < 2.0.0 - Subscriber+ Privilege Escalation
Slug
void-elementor-post-grid-addon-for-elementor-page-builder
Published
2024-08-16
Title
Void Elementor Post Grid Addon for Elementor Page builder < 2.4 - Authenticated (Contributor+) Local File Inclusion
Slug
void-elementor-whmcs-elements
Published
2024-04-16
Title
Void Elementor WHMCS Elements For Elementor Page Builder < 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
void-elementor-whmcs-elements
Published
2025-04-14
Title
Void Elementor WHMCS Elements For Elementor Page Builder <= 2.0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
void-visual-whmcs-element
Published
2024-11-20
Title
WPBakery Visual Composer WHMCS Elements < 1.0.4.1 - Contributor+ Stored XSS
Slug
void-visual-whmcs-element
Published
2025-05-07
Title
WPBakery Visual Composer WHMCS Elements <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
void-visual-whmcs-element
Published
2025-12-17
Title
WPBakery Visual Composer WHMCS Elements <= 1.0.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
voidek-employee-portal
Published
2025-12-04
Title
Voidek Employee Portal < 1.0.8 - Missing Authorization