WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-link-to-us
Published
2014-08-01
Title
wp-link-to-us <= 2.0 - XSS in ZeroClipboard
Slug
wp-linkedin-auto-publish
Published
2024-04-22
Title
WP LinkedIn Auto Publish < 8.12 - Missing Authorization
Slug
wp-links-page
Published
2023-04-19
Title
WP Links Page < 4.9.4 - Contributor+ Stored XSS
Slug
wp-links-page
Published
2023-11-07
Title
WP Links Page < 4.9.5 - Cross-Site Request Forgery via wplf_ajax_update_screenshots
Slug
wp-links-page
Published
2024-07-12
Title
WP Links Page < 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Limited Image Update
Slug
wp-links-page
Published
2025-07-22
Title
WP Links Page < 5.0 - Subscriber+ SQL Injection
Slug
wp-links-page
Published
2025-10-10
Title
WP Links Page < 5.0 - Authenticated (Subscriber+) SQL Injection
Slug
wp-lister-amazon
Published
2017-10-20
Title
Multiple Plugins - jQueryFileTree - Unauthenticated Path Traversal
Slug
wp-lister-ebay
Published
2017-10-20
Title
Multiple Plugins - jQueryFileTree - Unauthenticated Path Traversal
Slug
wp-lister-for-amazon
Published
2022-12-09
Title
WP-Lister Lite for Amazon < 2.4.4 - Reflected XSS
Slug
wp-lister-for-amazon
Published
2024-03-25
Title
WP-Lister Lite for Amazon < 2.6.9 - Reflected Cross-Site Scripting
Slug
wp-lister-for-amazon
Published
2024-03-26
Title
WP-Lister Lite for Amazon < 2.6.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-lister-for-amazon
Published
2024-06-27
Title
WP-Lister Lite for Amazon < 2.6.17 - Reflected Cross-Site Scripting
Slug
wp-lister-for-ebay
Published
2024-01-19
Title
WP-Lister Lite for eBay < 3.5.8 - Reflected Cross-Site Scripting via 's'
Slug
wp-lister-for-ebay
Published
2024-04-16
Title
WP-Lister Lite for eBay < 3.6.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Slug
wp-lister-for-ebay
Published
2024-04-22
Title
WP-Lister Lite for eBay < 3.6.0 - Authenticated (Shop Manager+) Arbitrary File Upload
Slug
wp-lister-for-ebay
Published
2024-08-16
Title
WP-Lister Lite for eBay < 3.6.1 - Reflected Cross-Site Scripting
Slug
wp-lister-for-ebay
Published
2024-09-30
Title
WP-Lister Lite for eBay < 3.6.5 - Reflected Cross-Site Scripting
Slug
wp-lister-for-ebay
Published
2025-05-27
Title
WP-Lister Lite for eBay < 3.8.5 - Missing Authorization
Slug
wp-lister-for-ebay
Published
2026-02-19
Title
WP-Lister Lite for eBay < 3.8.6 - Missing Authorization
Slug
wp-listings
Published
2016-01-27
Title
IMPress Listings <= 2.0.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
wp-listings
Published
2023-04-06
Title
IMPress Listings <= 2.6.2 - Contributor+ Stored XSS
Slug
wp-listings
Published
2023-10-11
Title
IMPress Listings <= 2.6.2 - Missing Authorization
Slug
wp-listings-pro
Published
2024-11-08
Title
WP Listings Pro <= 3.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-live-chat-software-for-wordpress
Published
2019-06-26
Title
LiveChat < 3.7.6 - Unauthenticated Option Update/Reset and Stored XSS