WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-image-news-slider
Published
2014-08-01
Title
Image News Slider 3.1 - Multiple Unspecified Remote Issues
Slug
wp-image-news-slider
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-image-resizer
Published
2014-08-01
Title
Image Resizer - Cross Site Scripting
Slug
wp-image-seo
Published
2024-10-18
Title
WordPress Image SEO <= 1.1.4 - Cross-Site Request Forgery
Slug
wp-image-shrinker
Published
2025-09-27
Title
Image shrinker <= 1.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
wp-image-slideshow
Published
2023-10-30
Title
wp image slideshow < 12.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
wp-image-uploader
Published
2025-01-29
Title
WP Image Uploader <= 1.0.1 - Reflected Cross-Site Scripting
Slug
wp-image-uploader
Published
2025-01-29
Title
WP Image Uploader <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Slug
wp-image-uploader
Published
2025-01-29
Title
WP Image Uploader <= 1.0.1 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
wp-image-zoooom
Published
2018-03-29
Title
WP Image Zoom <= 1.23 - Cross-Site Request Forgery (CSRF)
Slug
wp-image-zoooom
Published
2021-06-23
Title
WP Image Zoom < 1.47 - Local File Inclusion
Slug
wp-imageflow2
Published
2024-05-27
Title
WP Flow Plus < 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-imageflow2
Published
2024-10-21
Title
WP Flow Plus < 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-imageflow2
Published
2025-09-03
Title
WP Flow Plus < 5.2.6 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
wp-imagezoom
Published
2012-06-18
Title
Wp-ImageZoom <= 1.0.4 - File Disclosure
Slug
wp-imagezoom
Published
2014-08-01
Title
Wp-ImageZoom - zoom.php id Parameter SQL Injection
Slug
wp-imagezoom
Published
2024-10-16
Title
Wp-ImageZoom <= 1.1.0 - Reflected XSS
Slug
wp-imap-authentication
Published
2025-01-16
Title
WP IMAP Auth <= 4.0.1 - Reflected Cross-Site Scripting
Slug
wp-import-export
Published
2022-01-14
Title
WP Import Export < 3.9.16 - Unauthenticated Sensitive Data Disclosure
Slug
wp-import-export-lite
Published
2021-09-20
Title
WP Import Export Lite < 3.9.5 - Subscriber+ Extensions Update
Slug
wp-import-export-lite
Published
2021-09-20
Title
WP Import Export Lite < 3.9.5 - Subscriber+ Arbitrary Blog Options Update
Slug
wp-import-export-lite
Published
2022-01-14
Title
WP Import Export < 3.9.16 - Unauthenticated Sensitive Data Disclosure
Slug
wp-import-export-lite
Published
2024-04-05
Title
WP Import Export Lite < 3.9.27 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-import-export-lite
Published
2025-04-21
Title
WP Import Export Lite < 3.9.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
wp-import-export-lite
Published
2025-08-04
Title
WP Import Export Lite < 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload