WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-mylinks
Published
2024-09-30
Title
WP MyLinks < 1.0.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-native-articles
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-nerd-toolkit
Published
2024-12-11
Title
WP-NERD Toolkit <= 1.1 - Unauthenticated Information Exposure
Slug
wp-nested-pages
Published
2019-03-26
Title
Nested Pages <= 3.0.7 - Post Edit Bypass
Slug
wp-nested-pages
Published
2021-08-25
Title
Nested Pages < 3.1.16 - CSRF to Arbitrary Post Deletion and Modification
Slug
wp-nested-pages
Published
2021-08-25
Title
Nested Pages < 3.1.16 - Open Redirect
Slug
wp-nested-pages
Published
2022-06-06
Title
Nested Pages < 3.1.21 - Admin+ Stored Cross Site Scripting
Slug
wp-nested-pages
Published
2023-05-30
Title
Nested Pages < 3.2.4 - Editor+ Plugin Settings Reset
Slug
wp-nested-pages
Published
2023-12-01
Title
Nested Pages < 3.2.7 - Admin+ Stored XSS
Slug
wp-nested-pages
Published
2024-07-03
Title
Nested Pages < 3.2.8 - Cross-Site Request Forgery to Local File Inclusion
Slug
wp-nested-pages
Published
2024-08-28
Title
Nested Pages <= 3.2.8 - Editor+ Stored XSS
Slug
wp-nested-pages
Published
2025-01-24
Title
Nested Pages < 3.2.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-nested-pages
Published
2025-03-02
Title
Nested Pages < 3.2.13 - Contributor+ Stored XSS
Slug
wp-news-magazine
Published
2023-02-28
Title
WP News < 1.2.0 - Arbitrary Plugin Activation via CSRF
Slug
wp-news-sliders
Published
2025-01-14
Title
WP News Sliders <= 1.0 - Missing Authorization
Slug
wp-newsletter-subscription
Published
2024-09-24
Title
WP Newsletter Subscription <= 1.1 - Unauthenticated Local File Inclusion
Slug
wp-next-post-navi
Published
2024-05-20
Title
WP Next Post Navi <= 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-nice-loader
Published
2024-12-19
Title
WP Nice Loader <= 0.1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-no-bot-question
Published
2025-03-11
Title
WP No-Bot Question <= 0.1.7 - Cross-Site Request Forgery
Slug
wp-noexternallinks
Published
2016-07-14
Title
WP No External Links <= 3.5.15 - Cross-Site Scripting (XSS)
Slug
wp-noexternallinks
Published
2017-05-31
Title
WP No External Links <= 3.5.18 – Authenticated Cross-Site Scripting (XSS)
Slug
wp-noexternallinks
Published
2017-12-28
Title
WP No External Links 4.2.1-4.2.2 - Backdoored
Slug
wp-not-login-hide-wpnlh
Published
2023-11-14
Title
WP Not Login Hide <= 1.0 - Admin+ Stored XSS
Slug
wp-notcaptcha
Published
2025-01-16
Title
WP-NOTCAPTCHA <= 1.3.1 - Reflected Cross-Site Scripting
Slug
wp-notes-widget
Published
2025-05-16
Title
WP Notes Widget <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting