WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-limit-failed-login-attempts
Published
2024-10-07
Title
Limit Login Attempts (Spam Protection) < 5.4 - IP Address Spoofing to Protection Mechanism Bypass
Slug
wp-limit-failed-login-attempts
Published
2024-12-05
Title
Limit Login Attempts < 5.6 - Unauthenticated SQL Injeciton
Slug
wp-limit-login-attempts
Published
2015-09-05
Title
WP Limit Login Attempts <= 2.0.0 - Unauthenticated SQL Injection
Slug
wp-limit-login-attempts
Published
2022-12-27
Title
WP Limit Login Attempts <= 2.6.5 - IP Spoofing
Slug
wp-limit-posts-automatically
Published
2015-01-02
Title
WP Limit Posts Automatically <= 0.7 - CSRF & XSS
Slug
wp-limits
Published
2021-11-15
Title
WP Limits <= 1.0 - Plugin's Settings Update via CSRF
Slug
wp-line-notify
Published
2023-08-14
Title
LINE Notify < 1.4.5 - Reflected XSS
Slug
wp-link-bio
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-link-bio
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-link-preview
Published
2025-03-31
Title
WP Link Preview <= 1.4.1 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
wp-link-to-us
Published
2014-08-01
Title
wp-link-to-us <= 2.0 - XSS in ZeroClipboard
Slug
wp-linkedin-auto-publish
Published
2024-04-22
Title
WP LinkedIn Auto Publish < 8.12 - Missing Authorization
Slug
wp-links-page
Published
2023-04-19
Title
WP Links Page < 4.9.4 - Contributor+ Stored XSS
Slug
wp-links-page
Published
2023-11-07
Title
WP Links Page < 4.9.5 - Cross-Site Request Forgery via wplf_ajax_update_screenshots
Slug
wp-links-page
Published
2024-07-12
Title
WP Links Page < 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Limited Image Update
Slug
wp-links-page
Published
2025-07-22
Title
WP Links Page < 5.0 - Subscriber+ SQL Injection
Slug
wp-links-page
Published
2025-10-10
Title
WP Links Page < 5.0 - Authenticated (Subscriber+) SQL Injection
Slug
wp-lister-amazon
Published
2017-10-20
Title
Multiple Plugins - jQueryFileTree - Unauthenticated Path Traversal
Slug
wp-lister-ebay
Published
2017-10-20
Title
Multiple Plugins - jQueryFileTree - Unauthenticated Path Traversal
Slug
wp-lister-for-amazon
Published
2022-12-09
Title
WP-Lister Lite for Amazon < 2.4.4 - Reflected XSS
Slug
wp-lister-for-amazon
Published
2024-03-25
Title
WP-Lister Lite for Amazon < 2.6.9 - Reflected Cross-Site Scripting
Slug
wp-lister-for-amazon
Published
2024-03-26
Title
WP-Lister Lite for Amazon < 2.6.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-lister-for-amazon
Published
2024-06-27
Title
WP-Lister Lite for Amazon < 2.6.17 - Reflected Cross-Site Scripting
Slug
wp-lister-for-ebay
Published
2024-01-19
Title
WP-Lister Lite for eBay < 3.5.8 - Reflected Cross-Site Scripting via 's'
Slug
wp-lister-for-ebay
Published
2024-04-16
Title
WP-Lister Lite for eBay < 3.6.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting