WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
vr-frases
Published
2025-01-27
Title
VR Frases < 4.0 - Reflected XSS
Slug
vr-frases
Published
2025-01-29
Title
VR-Frases (collect & share quotes) < 4.0 - Authenticated (Admin+) SQL Injection
Slug
vr-frases
Published
2025-01-29
Title
VR-Frases (collect & share quotes) < 4.0 - Reflected Cross-Site Scripting
Slug
vr-views
Published
2025-01-07
Title
VR Views <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vrm360
Published
2023-09-25
Title
Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure
Slug
vrm360
Published
2023-11-24
Title
Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE
Slug
vrpconnector
Published
2024-12-17
Title
VRPConnector <= 2.0.1 - Unauthenticated PHP Object Injection
Slug
vrview
Published
2018-04-23
Title
Outdated VRView Library Used, Leading to Reflected XSS
Slug
vslider
Published
2023-02-15
Title
vSlider Multi Image Slider for WordPress <= 4.1.2 - Contributor+ Stored XSS
Slug
vslider
Published
2023-07-17
Title
vSlider Multi Image Slider for WordPress <= 4.1.2 - Cross-Site Request Forgery
Slug
vstemplate-creator
Published
2025-01-16
Title
VSTEMPLATE Creator <= 2.0.2 - Reflected Cross-Site Scripting
Slug
vzaar-media-management
Published
2026-01-27
Title
Vzaar Media Management <= 1.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']