WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-forum
Published
2014-08-01
Title
wp-forum - SQL Injection
Slug
wp-forum
Published
2009-09-28
Title
WP Forum < 2.4 - Multiple SQL Injection
Slug
wp-fountain
Published
2021-08-13
Title
WP Fountain <= 1.5.9 - Reflected Cross-Site Scripting
Slug
wp-fpo
Published
2025-01-16
Title
WP FPO <= 1.0 - Reflected Cross-Site Scripting
Slug
wp-free-ssl
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-free-ssl
Published
2024-09-24
Title
WP Free SSL – Free SSL Certificate for WordPress and force HTTPS <= 1.2.6 - Missing Authorization
Slug
wp-freeio
Published
2025-10-10
Title
WP Freeio < 1.2.22 - Unauthenticated Privilege Escalation
Slug
wp-freemind
Published
2025-06-05
Title
Freemind Viewer <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-from-email
Published
2024-07-11
Title
Change From Email <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-front-end-login-and-register
Published
2025-01-16
Title
WP Front-end login and register <= 2.1.0 - Reflected Cross-Site Scripting
Slug
wp-front-end-login-and-register
Published
2025-07-01
Title
WP Front-end login and register <= 2.1.0 - Reflected Cross-Site Scripting
Slug
wp-front-end-profile
Published
2016-09-14
Title
WP Front End Profile <= 0.2.1 - Privilege Escalation & Stored Cross-Site Scripting (XSS)
Slug
wp-front-end-profile
Published
2020-05-19
Title
WP Frontend Profile < 1.2.2 - CSRF Check Incorrectly Implemented
Slug
wp-front-end-profile
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-front-end-profile
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-front-end-profile
Published
2023-12-27
Title
WP Frontend Profile < 1.3.2 - Unauthenticated Privilege Escalation
Slug
wp-front-end-profile
Published
2026-03-06
Title
WP Frontend Profile < 1.3.9 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection
Slug
wp-front-end-profile
Published
2026-02-23
Title
Frontend Profile <= 1.3.9 - Missing Authorization
Slug
wp-front-end-repository
Published
2015-07-12
Title
WP Front-End Repository Manager <= 1.1 - Arbitrary File Upload
Slug
wp-frontend-submit
Published
2025-02-02
Title
WP Frontend Submit <= 1.1.0 - Reflected Cross-Site Scripting
Slug
wp-fsqm-pro
Published
2025-04-24
Title
eForm < 4.19 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-fsqm-pro
Published
2025-06-11
Title
eForm - WordPress Form Builder < 4.19.1 - Reflected Cross-Site Scripting
Slug
wp-full-stripe-free
Published
2023-07-05
Title
WP Full Stripe Free < 7.0.6 - Admin+ Stored Cross-Site Scripting
Slug
wp-full-stripe-free
Published
2023-10-17
Title
WP Full Stripe Free < 7.0.6 - Admin+ Stored XSS
Slug
wp-full-stripe-free
Published
2023-11-08
Title
WP Full Stripe Free < 7.0.18 - Settings Update via CSRF