WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-duplicate-page
Published
2026-01-12
Title
WP Duplicate Page < 1.8.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication
Slug
wp-dynamic-keywords-injector
Published
2023-02-20
Title
WP Dynamic Keywords Injector < 2.3.16 - Settings Update via CSRF
Slug
wp-dynamic-keywords-injector
Published
2024-04-15
Title
WP Dynamic Keywords Injector < 2.3.22 - Reflected Cross-Site Scripting
Slug
wp-dynamic-links
Published
2025-08-12
Title
WP Dynamic Links <= 1.0.1 - Reflected Cross-Site Scripting
Slug
wp-e-commerce
Published
2015-02-09
Title
WP eCommerce 3.8.9.5 - Cross-Site Scripting (XSS)
Slug
wp-e-commerce
Published
2014-08-01
Title
WP eCommerce 3.8.9 - Cross-Site Scripting (XSS)
Slug
wp-e-commerce
Published
2014-08-01
Title
WP eCommerce 3.8.9 - SQL Injection
Slug
wp-e-commerce
Published
2014-08-01
Title
WP eCommerce 3.8.6 - Cross-Site Scripting (XSS)
Slug
wp-e-commerce
Published
2015-02-09
Title
WP eCommerce <= 3.8.6 - SQL Injection
Slug
wp-e-commerce
Published
2014-10-05
Title
WP eCommerce <= 3.8.7.5 - Unspecified SQL Injection
Slug
wp-e-commerce
Published
2014-11-01
Title
WP eCommerce <= 3.8.14.3 - Authorisation Bypass
Slug
wp-e-commerce
Published
2015-04-20
Title
WP eCommerce <= 3.9.2 - Reflected Cross-Site Scripting (XSS)
Slug
wp-e-commerce
Published
2016-11-12
Title
WP eCommerce <= 3.11.3 - SQL Injection in sessionid
Slug
wp-e-commerce
Published
2024-02-27
Title
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
Slug
wp-e-commerce
Published
2024-02-27
Title
WP eCommerce <= 3.15.1 - Missing Authorization to Unauthenticated Arbitrary Post Creation
Slug
wp-e-commerce
Published
2026-01-21
Title
WP eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection
Slug
wp-e-commerce
Published
2026-02-13
Title
WP eCommerce <= 3.15.1 - Coupon Deletion via CSRF
Slug
wp-e-commerce-predictive-search
Published
2014-08-01
Title
WP e-Commerce Predictive Search - "rs" Cross-Site Scripting
Slug
wp-e-commerce-style-email
Published
2024-11-18
Title
WP e-Commerce Style Email <= 0.6.2 - Reflected Cross-Site Scripting
Slug
wp-e-commerce-style-email
Published
2025-03-24
Title
WP e-Commerce Style Email <= 0.6.2 - Cross-Site Request Forgery to Remote Code Execution
Slug
wp-e-customers
Published
2025-02-20
Title
WP E Customers <= 0.0.1 - Reflected XSS
Slug
wp-eMember
Published
2024-05-14
Title
WP eMember < 10.3.9 - Reflected XSS
Slug
wp-eMember
Published
2024-05-14
Title
WP eMember < 10.3.9 - Reflected Cross-Site Scripting
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Admin+ Arbitrary File Upload
Slug
wp-eMember
Published
2024-06-22
Title
WP eMember < 10.6.6 - Reflected XSS