WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-file-upload
Published
2026-10-30
Title
Iptanus File Upload < 5.2.2 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-file-uploader
Published
2014-08-01
Title
File Uploader - PHP File Upload
Slug
wp-filebase
Published
2014-08-01
Title
WP-Filebase Download Manager 0.3.0.02 - class/Admin.php GetFileHash Function Remote Comm& Execution
Slug
wp-filebase
Published
2014-08-01
Title
WP-Filebase 0.2.9.24- Unspecified Vulnerabilities
Slug
wp-filebase
Published
2011-09-09
Title
WP-Filebase Download Manager <= 0.2.9 - SQL Injection
Slug
wp-filebase
Published
2017-03-01
Title
WP-Filebase Download Manager - Authenticated Cross-Site Scripting (XSS)
Slug
wp-filemanager
Published
2014-08-01
Title
wp-FileManager < 1.4.0 - File Download
Slug
wp-film-studio
Published
2023-02-28
Title
WP Film Studio < 1.3.5 - Arbitrary Plugin Activation via CSRF
Slug
wp-filter-combine-rss-feeds
Published
2025-08-22
Title
WP Filter & Combine RSS Feeds <= 0.4 - Missing Authorization to Authenticated (Contributor+) Feed Deletion
Slug
wp-filter-post-categories
Published
2025-04-24
Title
WP Filter Post Category <= 2.1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-finance
Published
2025-01-10
Title
WP Finance <= 1.3.6 - Reflected XSS
Slug
wp-finance
Published
2025-01-10
Title
WP Finance <= 1.3.6 - Stored XSS via CSRF
Slug
wp-find-your-nearest
Published
2024-11-28
Title
WP Find Your Nearest <= 0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-find-your-nearest
Published
2025-02-02
Title
WP Find Your Nearest <= 0.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-fixtag
Published
2025-01-16
Title
WP FixTag <= v2.0.2 - Reflected Cross-Site Scripting
Slug
wp-flash-player
Published
2015-07-23
Title
Flash Player Plugin <= 1.3 - Multiple Cross-Site Scripting (XSS)
Slug
wp-flashy-marketing-automation
Published
2025-12-08
Title
Flashy Marketing Automation < 2.0.9 - Cross-Site Request Forgery
Slug
wp-flexible-map
Published
2025-08-18
Title
Flexible Maps < 1.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flexible Maps Shortcode
Slug
wp-flickr-press
Published
2025-01-16
Title
wp-flickr-press <= 2.6.4 - Reflected Cross-Site Scripting
Slug
wp-flickrshow
Published
2025-11-10
Title
Flickr Show <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-flipclock
Published
2023-01-20
Title
WP Flipclock < 1.8 - Contributor+ Stored XSS
Slug
wp-flipclock
Published
2025-04-16
Title
WP Flipclock <= 1.10 - Contributor+ Stored XSS
Slug
wp-flipkart-importer
Published
2024-12-12
Title
WP Flipkart Importer <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-flipper
Published
2025-11-12
Title
WordPress Content Flipper <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-flipslideshow
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)