WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-google-places-review-slider
Published
2019-10-31
Title
WP Google Review Slider <= 6.1 - Authenticated SQL Injection
Slug
wp-google-places-review-slider
Published
2022-12-02
Title
WP Google Review Slider < 11.6 - Admin+ Stored XSS
Slug
wp-google-places-review-slider
Published
2023-01-23
Title
WP Google Review Slider < 11.8 - Subscriber+ SQLi
Slug
wp-google-places-review-slider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-google-places-review-slider
Published
2024-04-05
Title
WP Google Review Slider < 13.6 - Admin+ Stored XSS
Slug
wp-google-places-review-slider
Published
2024-11-05
Title
WP Google Review Slider < 15.6 - Admin+ Stored XSS
Slug
wp-google-places-review-slider
Published
2025-03-27
Title
WP Google Review Slider < 16.1 - Cross-Site Request Forgery to SQL Injection
Slug
wp-google-places-review-slider
Published
2025-11-14
Title
Google Review Slider < 17.6 - Missing Authorization
Slug
wp-google-street-view
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-google-street-view
Published
2025-01-23
Title
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-google-street-view
Published
2025-03-27
Title
WP Google Street View < 1.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-google-street-view
Published
2026-01-08
Title
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO < 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpgsv_map' Shortcode
Slug
wp-google-street-view-shortcode
Published
2025-11-20
Title
Shortcode for Google Street View <= 0.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-google-tag-manager
Published
2023-02-27
Title
WP Google Tag Manager <= 1.1 - Cross-Site Request Forgery (CSRF)
Slug
wp-gotowebinar
Published
2023-10-24
Title
WP GoToWebinar < 14.46 - Admin+ Stored XSS
Slug
wp-gotowebinar
Published
2024-04-22
Title
WP GoToWebinar < 15.1 - Missing Authorization
Slug
wp-gotowebinar
Published
2024-07-11
Title
WP GoToWebinar < 15.7 - Missing Authorization
Slug
wp-gotowebinar
Published
2024-07-10
Title
WP GoToWebinar < 15.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-gotowebinar
Published
2024-07-19
Title
WP GoToWebinar < 15.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-gpx-map
Published
2014-08-01
Title
wp-gpx-max version 1.1.21 - Arbitrary File Upload
Slug
wp-gpx-maps
Published
2023-09-29
Title
WP GPX Map < 1.7.06 - Missing Authorization
Slug
wp-gpx-maps
Published
2024-09-24
Title
WP GPX Maps <= 1.7.08 - Authenticated (Contributor+) Stored Cross-Site Scripting via sgpx Shortcode
Slug
wp-graphql
Published
2019-05-08
Title
WPGraphQL < 0.3.0 - Multiple Vulnerabilities
Slug
wp-graphql
Published
2021-04-27
Title
WPGraphQL < 1.3.6 - Denial of Service
Slug
wp-graphql
Published
2019-07-10
Title
WP-GraphQL < 0.3.5 - Improper Access Control