WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
web3-authentication
Published
2023-06-29
Title
Web3 – Crypto wallet Login & NFT token gating < 2.7.0 - Authentication Bypass
Slug
web3-authentication
Published
2024-01-17
Title
Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass
Slug
web3-coin-gate
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
web3-token-gate
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
webapp-builder
Published
2017-03-07
Title
Webapp builder 2.0 - Unauthenticated File Upload
Slug
webappick-pdf-invoice-for-woocommerce
Published
2025-05-07
Title
Challan < 3.7.59 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
webappick-product-feed-for-woocommerce
Published
2019-08-30
Title
WooCommerce Product Feed for Google, Facebook, eBay and Many More < 3.1.15 - Authenticated Reflected XSS
Slug
webappick-product-feed-for-woocommerce
Published
2024-07-19
Title
CTX Feed < 6.5.7 - Shop Manager+ Arbitrary Options Update
Slug
webappick-product-feed-for-woocommerce
Published
2026-01-04
Title
CTX Feed < 6.6.19 - Missing Authorization
Slug
webappick-product-feed-for-woocommerce
Published
2026-02-18
Title
CTX Feed – WooCommerce Product Feed Manager < 6.6.12 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation
Slug
webappick-product-feed-for-woocommerce
Published
2026-04-07
Title
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels < 6.6.27 - Authenticated (Shop Manager+) PHP Object Injection
Slug
webba-booking-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
webba-booking-lite
Published
2022-04-15
Title
Webba Booking < 4.2.22 - Admin+ Stored Cross-Site Scripting
Slug
webba-booking-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
webba-booking-lite
Published
2023-12-26
Title
Webba Booking < 5.0 - Cross-Site Request Forgery
Slug
webba-booking-lite
Published
2024-09-23
Title
Appointment & Event Booking Calendar Plugin – Webba Booking < 5.0.50 - Missing Authorization to Authenticated (Subscriber+) CSS Settings Update
Slug
webba-booking-lite
Published
2025-07-16
Title
Webba Booking < 5.1.22 - Missing Authorization
Slug
webba-booking-lite
Published
2025-07-16
Title
Webba Booking < 5.1.21 - Cross-Site Request Forgery
Slug
webba-booking-lite
Published
2025-08-14
Title
Webba Booking < 6.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
webba-booking-lite
Published
2025-12-15
Title
Webba Booking < 6.2.2 - Missing Authorization
Slug
webbricks-addons
Published
2024-10-21
Title
Web Bricks Addons for Elementor < 1.1.11 - Contributor+ Stored XSS
Slug
webcake
Published
2025-12-04
Title
Webcake – Landing Page Builder < 1.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
webcam-2way-videochat
Published
2014-09-17
Title
Webcam 2Way Videochat < 4.41.2 - Cross-Site Scripting (XSS)
Slug
webcam-2way-videochat
Published
2021-08-13
Title
2Way VideoCalls and Random Chat < 5.2.8 - Reflected Cross-Site Scripting
Slug
webcamconsult
Published
2025-01-17
Title
Webcamconsult < 1.6.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting