WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-ecommerce-cvs-importer
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-ecommerce-paypal
Published
2021-10-04
Title
Easy PayPal Buy Now Button < 1.7.3 - CSRF to Stored Cross-Site Scripting
Slug
wp-ecommerce-paypal
Published
2023-01-19
Title
Easy PayPal Buy Now Button < 1.7.4 - Contributor+ Stored XSS in Shortcode
Slug
wp-ecommerce-paypal
Published
2023-12-27
Title
Easy PayPal Buy Now Button < 1.8.2 - Cross-Site Request Forgery
Slug
wp-ecommerce-paypal
Published
2024-02-27
Title
Easy PayPal & Stripe Buy Now Button <= 1.8.3 & Contact Form 7 – PayPal & Stripe Add-on <= 2.1 - Cross-Site Request Forgery to Settings Update
Slug
wp-ecommerce-paypal
Published
2024-08-09
Title
Easy PayPal Buy Now Button < 1.9.1 - Unauthenticated Open Redirect
Slug
wp-ecommerce-paypal
Published
2025-05-07
Title
Easy PayPal Buy Now Button < 2.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-ecommerce-paypal
Published
2026-07-28
Title
Easy PayPal & Stripe Buy Now Button < 2.0.5 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-ecommerce-paypal
Published
2026-09-28
Title
Easy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Price
Slug
wp-ecommerce-quickpay
Published
2024-12-17
Title
WP eCommerce Quickpay <= 1.1.0 - Reflected Cross-Site Scripting
Slug
wp-ecommerce-shop-styling
Published
2014-08-01
Title
WP e-Commerce Shop Styling < 1.8 - Remote File Inclusion
Slug
wp-ecommerce-shop-styling
Published
2015-07-05
Title
WP e-Commerce Shop Styling <= 2.5 - Local File Inclusion
Slug
wp-ecommerce-shop-styling
Published
2020-03-24
Title
Multiple plugins - Unauthenticated Dompdf Local File Inclusion (LFI)
Slug
wp-edit
Published
2025-06-27
Title
WP Edit <= 4.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-edit-menu
Published
2022-08-01
Title
WP Edit Menu < 1.5.0 - Unauthenticated Arbitrary Post Deletion
Slug
wp-edit-menu
Published
2022-08-01
Title
WP Edit Menu <= 1.5.0 - Arbitrary Post Deletion via CSRF
Slug
wp-edit-password-protected
Published
2025-08-21
Title
Wp Edit Password Protected < 1.3.5 - Protection Bypass via REST API
Slug
wp-edit-password-protected
Published
2025-08-21
Title
Wp Edit Password Protected < 1.3.5 - Open Redirect
Slug
wp-edit-password-protected
Published
2026-09-28
Title
WP Edit Password Protected 2.0.0 - 2.0.6 - Unauthenticated Site-Wide Access Mode Bypass via REST API
Slug
wp-edit-username
Published
2023-11-07
Title
WP Edit Username < 1.0.6 - Admin+ Stored XSS
Slug
wp-edit-username
Published
2023-12-19
Title
WP Edit Username < 1.0.6 - Admin+ Stored XSS
Slug
wp-editor
Published
2016-10-05
Title
WP Editor <= 1.2.6.2 - Multiple Cross-Site Scripting (XSS)
Slug
wp-editor
Published
2016-05-13
Title
WP Editor < 1.2.6 - CSRF & Incorrect Permissions
Slug
wp-editor
Published
2021-02-01
Title
WP Editor < 1.2.7 - Authenticated SQL injection
Slug
wp-editor
Published
2024-02-12
Title
WP Editor < 1.2.8 - Sensitive Information Exposure via log file