WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-jquery-datatable
Published
2025-01-03
Title
WP jQuery DataTable < 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-jquery-datatable
Published
2025-05-07
Title
WP jQuery DataTable <= 4.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-jquery-lightbox
Published
2024-06-06
Title
WP jQuery Lightbox < 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute
Slug
wp-jquery-lightbox
Published
2025-04-21
Title
LightPress Lightbox < 2.3.4 - Contributor+ Stored XSS
Slug
wp-jquery-pdf-paged
Published
2025-10-14
Title
WP jQuery Pager <= 1.4.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
wp-jquery-spam
Published
2014-08-01
Title
WP jQuery Spam 1.1 - dynamic.php id Parameter Reflected XSS
Slug
wp-js
Published
2022-05-03
Title
WP JS <= 2.0.6 - Reflected Cross-Site Scripting
Slug
wp-js-external-link-info
Published
2014-08-01
Title
JS External Link Info 1.21 - redirect.php blog Parameter XSS
Slug
wp-js-impress
Published
2024-11-04
Title
imPress <= 0.1.4 - Reflected Cross-Site Scripting
Slug
wp-js-list-pages-shortcodes
Published
2026-01-06
Title
WP Js List Pages Shortcodes <= 1.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute
Slug
wp-jscrollpane
Published
2025-08-07
Title
WP-jScrollPane <= 2.0.3 - Reflected Cross-Site Scripting
Slug
wp-jump-menu
Published
2023-10-02
Title
WP Jump Menu <= 3.6.4 - Admin+ Stored XSS
Slug
wp-keyword-monitor
Published
2025-02-03
Title
WP Keyword Monitor <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-knowledgebase
Published
2023-10-26
Title
WP Knowledgebase <= 1.3.4 - CSRF
Slug
wp-krpano
Published
2025-01-16
Title
WP krpano <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-landing-page
Published
2025-12-05
Title
WP Landing Page <= 0.9.3 - Cross-Site Request Forgery to Arbitrary Post Meta Update
Slug
wp-last-modified
Published
2025-03-11
Title
WP Last Modified <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-last-modified-info
Published
2020-04-03
Title
WP Last Modified Info < 1.6.6 - Authenticated Stored XSS
Slug
wp-last-modified-info
Published
2024-08-19
Title
WP Last Modified Info < 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via lmt-post-modified-info Shortcode
Slug
wp-last-modified-info
Published
2025-10-18
Title
WP Last Modified Info < 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-last-modified-info
Published
2025-08-24
Title
WP Last Modified Info < 1.9.5 - Authenticated (Contributor+) Remote Code Execution
Slug
wp-latest-posts
Published
2015-08-15
Title
WP Latest Posts < 3.7.5 - XSS
Slug
wp-latest-posts
Published
2024-05-07
Title
WP Latest Posts < 5.0.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
wp-lead-capture
Published
2026-01-08
Title
Lead Capturing Pages <= 2.5 - Unauthenticated SQL Injection
Slug
wp-lead-stream
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius