WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-marketing-automations
Published
2024-10-24
Title
Automation By Autonami < 3.3.0 - Unauthenticated SQLi
Slug
wp-marketing-automations
Published
2025-03-21
Title
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit < 3.5.2 - Unauthenticated SQL Injection via 'automationId'
Slug
wp-marketing-automations
Published
2025-03-27
Title
Automation By Autonami < 3.5.2 - Open Redirect
Slug
wp-marketing-automations
Published
2025-06-12
Title
Automation By Autonami < 3.6.1 - Open Redirect
Slug
wp-marketing-automations
Published
2025-06-17
Title
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit < 3.6.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation
Slug
wp-marketing-automations
Published
2025-08-18
Title
Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library
Slug
wp-marketing-automations
Published
2025-11-04
Title
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce < 3.6.4.2 - Unauthenticated Sensitive Information Exposure
Slug
wp-marketing-automations
Published
2025-11-04
Title
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce < 3.6.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Slug
wp-marketplace
Published
2014-08-01
Title
WP Marketplace 1.1.0 - Shell Upload
Slug
wp-masonry-infinite-scroll
Published
2025-06-25
Title
WP Masonry & Infinite Scroll < 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-masquerade
Published
2024-04-25
Title
WP Masquerade <= 1.1.0 - Subscriber+ Account Takeover
Slug
wp-mathjax-plus
Published
2024-11-28
Title
WP MathJax <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-matrix-gallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-maximum-upload-file-size
Published
2024-11-22
Title
Wp Maximum Upload File Size < 1.1.4 - Authenticated (Author+) Full Path Disclosure
Slug
wp-media-categories
Published
2025-09-26
Title
WP Media Categories <= 2.1.0 - Cross-Site Request Forgery
Slug
wp-media-category-management
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-media-category-management
Published
2024-04-22
Title
WP Media Category Management < 2.3.0 - Reflected Cross-Site Scripting
Slug
wp-media-category-management
Published
2025-02-18
Title
WP Media Category Management 2.0 - 2.3.3 - Cross-Site Request Forgery to Settings Update
Slug
wp-media-cleaner
Published
2015-02-26
Title
WP Media Cleaner <= 2.2.6 - Cross-Site Scripting (XSS)
Slug
wp-media-file-type-manager
Published
2025-06-05
Title
WP Media File Type Manager <= 2.3.1 - Settings Update via CSRF
Slug
wp-media-folder
Published
2024-02-12
Title
WP Media folder < 5.7.3 - Missing Authorization to Authenticated(Subscriber+) Plugin settings change
Slug
wp-media-folder
Published
2024-02-15
Title
WP Media folder < 5.7.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
wp-media-folder
Published
2024-02-12
Title
WP Media folder < 5.7.3 - Missing Authorization to Authenticated(Subscriber+) Title Modification
Slug
wp-media-library-categories
Published
2023-01-20
Title
Media Library Categories < 2.0.0 - Admin+ Stored XSS
Slug
wp-media-library-categories
Published
2023-07-20
Title
Media Library Categories < 2.0.1 - Admin+ Stored XSS