WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
varnish-wp
Published
2025-03-31
Title
Varnish WordPress <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
vasaio-qr-code
Published
2025-04-24
Title
Vasaio QR Code <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
vaultpress
Published
2017-03-01
Title
VaultPress <= 1.8.6 - Backend Server SSL Verification Disabled
Slug
vaultpress
Published
2017-09-16
Title
VaultPress 1.89-1.9 - Unauthenticated RCE
Slug
vayu-blocks
Published
2024-12-11
Title
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce < 1.2.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
Slug
vayu-blocks
Published
2025-02-03
Title
Vayu Blocks <= 1.4.4 - Contributor+ Stored XSS
Slug
vayu-blocks
Published
2025-04-07
Title
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce 1.0.4 - 1.2.1 - Missing Authorization to Unauthenticated Limited Arbitrary Options Update
Slug
vayu-blocks
Published
2025-06-02
Title
Vayu Blocks < 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via containerWidth Parameter
Slug
vayu-blocks
Published
2025-09-02
Title
Vayu Blocks < 1.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Block Attributes
Slug
vbsso-lite
Published
2024-12-11
Title
vBSSO-lite <= 1.4.3 - Missing Authorization to Privilege Escalation
Slug
vc-addons-by-bit14
Published
2024-07-15
Title
Web and WooCommerce Addons for WPBakery Builder < 1.4.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification
Slug
vc-addons-by-bit14
Published
2024-08-26
Title
Web and WooCommerce Addons for WPBakery Builder <= 1.5 - Editor+ Stored XSS
Slug
vc-addons-by-bit14
Published
2025-12-31
Title
Web and WooCommerce Addons for WPBakery Builder <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vc-autoresponder-addon
Published
2026-02-25
Title
Bakery Autoresponder Addon <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting
Slug
vc-autoresponder-addon
Published
2026-02-25
Title
Bakery Autoresponder Addon <= 1.0.6 - Missing Authorization
Slug
vc-tabs
Published
2021-12-20
Title
Tabs < 3.6.0 - Unauthenticated Arbitrary Option Update
Slug
vc-tabs
Published
2021-12-20
Title
Tabs < 3.7.0 - Authenticated Arbitrary Options Update
Slug
vc-tabs
Published
2022-09-22
Title
Tabs < 3.7.2 - Admin+ Stored Cross-Site Scripting
Slug
vc-tabs
Published
2024-06-20
Title
Tabs <= 4.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
vc_clipboard
Published
2021-04-06
Title
WPBakery Page Builder Clipboard < 4.5.8 - Unauthorised Arbitrary License Options Update
Slug
vc_clipboard
Published
2021-04-03
Title
WPBakery Page Builder Clipboard < 4.5.6 - Subscriber+ Stored Cross-Site Scripting (XSS)
Slug
vcaching
Published
2025-08-20
Title
Varnish/Nginx Proxy Caching <= 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
vcaching
Published
2025-12-31
Title
Varnish/Nginx Proxy Caching <= 1.8.3 - Unauthenticated Information Exposure
Slug
vcos
Published
2025-01-16
Title
vcOS <= 1.4.0 - Reflected Cross-Site Scripting
Slug
vdocipher
Published
2024-09-30
Title
VdoCipher < 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting