WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wowhead-tooltips
Published
2025-04-24
Title
WoWHead Tooltips <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wowpress
Published
2026-04-07
Title
WowPress <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
wowpth
Published
2025-02-20
Title
WoWPth <= 2.0 - Reflected XSS
Slug
wowpth
Published
2025-02-20
Title
WoWPth <= 2.0 - Reflected XSS
Slug
wowrestro
Published
2021-07-12
Title
WOWRestro < 1.1 - CSRF Bypass
Slug
wp-1-slider
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-2fa
Published
2022-04-14
Title
WP 2FA < 2.2.0 - Arbitrary 2FA Disabling via IDOR
Slug
wp-2fa
Published
2022-05-06
Title
WP 2FA < 2.2.1 - Reflected Cross-Site Scripting
Slug
wp-2fa
Published
2022-09-14
Title
WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
Slug
wp-2fa
Published
2024-01-02
Title
WP 2FA < 2.6.0 - Subscriber+ Arbitrary Email Sending
Slug
wp-2fa
Published
2024-01-02
Title
WP 2FA < 2.6.0 - Arbitrary Email Sending via CSRF
Slug
wp-2fa
Published
2024-04-16
Title
WP 2FA – Two-factor authentication for WordPress < 2.6.3 - Reflected Cross-Site Scripting
Slug
wp-2fa
Published
2024-06-20
Title
WP 2FA < 2.6.4 - Unauthenticated Information Exposure via Log File
Slug
wp-2fa
Published
2025-11-03
Title
WP 2FA < 3.0.0 - Second Factor Bypass
Slug
wp-2fa
Published
2026-06-23
Title
WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email Binding
Slug
wp-2fa
Published
2026-07-29
Title
WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys Provider
Slug
wp-2fa
Published
2026-10-08
Title
WP 2FA – Two-factor authentication for WordPress < 4.2.0 - Cross-Site Request Forgery
Slug
wp-2fa
Published
2026-10-01
Title
WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via TOTP Code Replay
Slug
wp-2fa
Published
2026-10-12
Title
WP 2FA < 4.2.0 - Admin+ Arbitrary User 2FA Removal via IDOR
Slug
wp-3dbanner-rotator
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-3dflick-slideshow
Published
2014-08-01
Title
wp-3dflick-slideshow - Arbitrary File Upload
Slug
wp-3dflick-slideshow
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-404-auto-redirect-to-similar-post
Published
2023-08-11
Title
WP 404 Auto Redirect to Similar Post < 1.0.4 - Admin+ Stored XSS
Slug
wp-404-auto-redirect-to-similar-post
Published
2024-02-05
Title
WP 404 Auto Redirect to Similar Post < 1.0.4 - Reflected Cross-Site Scripting via request
Slug
wp-404-auto-redirect-to-similar-post
Published
2024-04-16
Title
WP 404 Auto Redirect to Similar Post < 1.0.5 - Reflected Cross-Site Scripting via Debug Mode URI