WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-options-editor
Published
2025-01-16
Title
WP Options Editor <= 1.1 - Cross-Site Request Forgery to Privilege Escalation
Slug
wp-order-by
Published
2025-01-14
Title
WP Order By <= 1.4.2 - Reflected Cross-Site Scripting
Slug
wp-original-media-path
Published
2023-04-19
Title
WP Original Media Path < 2.4.1 - Admin+ Stored XSS
Slug
wp-orphanage-extended
Published
2024-11-22
Title
WP-Orphanage Extended < 1.3 - Cross-Site Request Forgery to Orphan Account Privilege Escalation
Slug
wp-page-duplicator
Published
2024-02-27
Title
Page Duplicator <= 0.1.1 - Missing Authorization to Unauthenticated Post/Page Duplication
Slug
wp-page-loading
Published
2025-06-05
Title
WP Page Loading < 1.0.7 - Cross-Site Request Forgery
Slug
wp-page-post-widget-clone
Published
2024-04-25
Title
WP Page Post Widget Clone <= 1.0.1 - Missing Authorization
Slug
wp-page-widget
Published
2015-08-25
Title
WP Page Widget <= 2.7 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
wp-page-widget
Published
2022-09-26
Title
WP Page Widget < 4.0 - Settings Update via CSRF
Slug
wp-pagebuilder
Published
2021-03-17
Title
WP Page Builder < 1.2.4 - Insecure default configuration Allows Subscribers Editing Access to Posts
Slug
wp-pagebuilder
Published
2021-03-17
Title
WP Page Builder < 1.2.4 - Multiple Stored Cross-Site scripting (XSS)
Slug
wp-pagebuilder
Published
2022-11-10
Title
WP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site
Slug
wp-pagebuilder
Published
2022-10-21
Title
WP Page Builder < 1.2.7 - Author+ Stored XSS
Slug
wp-paginate
Published
2021-01-05
Title
WP Paginate < 2.1.4 - Admin+ Stored Cross-Site Scripting
Slug
wp-paginate
Published
2022-06-16
Title
WP Paginate < 2.1.9 - Admin+ Stored Cross-Site Scripting
Slug
wp-pagseguro-payments
Published
2024-11-08
Title
WP PagSeguro Payments <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-pano
Published
2025-01-14
Title
wp-pano <= 1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-panoramio
Published
2025-01-22
Title
WP Panoramio <= 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-parallax-content-slider
Published
2025-03-24
Title
WP Parallax Content Slider <= 0.9.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-parsidate
Published
2023-01-23
Title
Parsi Date < 4.0.2 - Reflected Cross-Site Scripting
Slug
wp-parsidate
Published
2024-11-25
Title
Parsi Date < 5.1.2 - Reflected Cross-Site Scripting via add_query_arg Parameter
Slug
wp-payeezy-pay
Published
2018-12-07
Title
WP Payeezy Pay < 2.98 - Local File Inclusion
Slug
wp-payment-form
Published
2022-08-10
Title
Best Payments Plugin for WP < 4.2.1 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-payment-form
Published
2022-08-10
Title
Best Payments Plugin for WP < 4.2.1 - Reflected Cross-Site Scripting
Slug
wp-paypal
Published
2025-01-16
Title
Payment Button for PayPal < 1.2.3.36 - Authenticated (Contributor+) Stored Cross-Site Scripting