WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
vertical-response-newsletter-widget
Published
2025-05-02
Title
VerticalResponse Newsletter Widget <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
vertical-scroll-image-slideshow-gallery
Published
2025-07-17
Title
Vertical scroll image slideshow gallery <= 11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Slug
vertical-scroll-recent-post
Published
2022-04-26
Title
Vertical scroll recent post < 14.0 - Reflected Cross-Site Scripting
Slug
vertical-scroll-recent-post
Published
2023-03-21
Title
Vertical scroll recent post <= 14.0 - Contributor+ Stored Cross-Site Scripting
Slug
vertical-scroll-recent-post
Published
2023-11-08
Title
Vertical scroll recent post <= 14.0 - Cross-Site Request Forgery via vsrp_admin_options
Slug
vertical-scroll-slideshow-gallery-v2
Published
2025-08-15
Title
Vertical scroll slideshow gallery v2 <= 9.1 - Authenticated (Contributor+) SQL Injection
Slug
verve-meta-boxes
Published
2014-08-01
Title
Verve Meta Boxes 1.2.8 - Shell Upload
Slug
verweise-wordpress-twitter
Published
2014-08-01
Title
Verwei.se WordPress Twitter < 1.0 2 - Cross-Site Scripting (XSS)
Slug
very-simple-breadcrumb
Published
2022-06-21
Title
Very Simple Breadcrumb <= 1.0 - Admin+ Stored Cross-Site Scripting
Slug
very-simple-contact-form
Published
2022-05-30
Title
Very Simple Contact Form < 11.6 - Captcha bypass
Slug
very-simple-contact-form
Published
2023-09-05
Title
VS Contact Form < 14.0 - Missing Authorization
Slug
very-simple-contact-form
Published
2024-03-29
Title
VS Contact Form < 14.8 - CAPTCHA Bypass
Slug
very-simple-google-maps
Published
2023-01-20
Title
Very Simple Google Maps < 2.9 - Contributor+ Stored XSS
Slug
very-simple-google-maps
Published
2023-10-23
Title
Very Simple Google Maps < 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
very-simple-quiz
Published
2020-08-10
Title
Very Simple Quiz - Multiple Authenticated Stored Cross-Site Scripting (XSS)
Slug
vg-postcarousel
Published
2025-02-24
Title
VG PostCarousel <= 1.1 - Authenticated (Contributor+) Local File Inclusion
Slug
vg-woocarousel
Published
2025-04-04
Title
VG WooCarousel <= 1.3 - Authenticated (Contributor+) Local File Inclusion
Slug
vgw-metis
Published
2025-06-25
Title
VG WORT METIS < 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
Slug
vgw-metis
Published
2025-06-26
Title
VG WORT METIS <= 2.0.1 - Missing Authorization
Slug
viaads
Published
2025-11-03
Title
ViaAds < 2.1.3 - Cross-Site Request Forgery to API Key Update
Slug
vibebp
Published
2024-12-17
Title
VibeBP < 1.9.9.5.1 - Authenticated (Subscriber+) SQL Injection
Slug
vibebp
Published
2024-12-17
Title
VibeBP < 1.9.9.7.7 - Unauthenticated SQL Injection
Slug
vibebp
Published
2024-12-17
Title
VibeBP < 1.9.9.5 - Unauthenticated Privilege Escalation
Slug
vibes
Published
2025-08-25
Title
Vibes < 2.2.1 - Unauthenticated SQL Injection via `resource` Parameter
Slug
vice-versa
Published
2025-04-10
Title
Vice Versa <= 2.2.3 - Reflected Cross-Site Scripting