WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
vrm360
Published
2023-11-24
Title
Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE
Slug
vrpconnector
Published
2024-12-17
Title
VRPConnector <= 2.0.1 - Unauthenticated PHP Object Injection
Slug
vrview
Published
2018-04-23
Title
Outdated VRView Library Used, Leading to Reflected XSS
Slug
vslider
Published
2023-02-15
Title
vSlider Multi Image Slider for WordPress <= 4.1.2 - Contributor+ Stored XSS
Slug
vslider
Published
2023-07-17
Title
vSlider Multi Image Slider for WordPress <= 4.1.2 - Cross-Site Request Forgery
Slug
vstemplate-creator
Published
2025-01-16
Title
VSTEMPLATE Creator <= 2.0.2 - Reflected Cross-Site Scripting
Slug
vtables
Published
2026-10-26
Title
vTables < 0.3 - Unauthenticated SQL Injection via orderby Parameter
Slug
vulnity
Published
2026-10-15
Title
Vulnity Security < 1.4.4 - Unauthenticated Authentication Bypass to Administrator via Exposed Pairing Credentials
Slug
vzaar-media-management
Published
2026-01-27
Title
Vzaar Media Management <= 1.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']