WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-popups-lite
Published
2022-12-28
Title
WP Popups < 2.1.4.8 - Contributor+ Stored XSS
Slug
wp-popups-lite
Published
2023-01-23
Title
WP Popups < 2.1.4.9 - Contributor+ Stored XSS
Slug
wp-popups-lite
Published
2023-04-17
Title
WP Popups < 2.1.5.1 - Contributor+ Stored XSS
Slug
wp-popups-lite
Published
2024-03-15
Title
WP Popups < 2.1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-popups-lite
Published
2024-07-11
Title
WP Popups – WordPress Popup builder < 2.2.0.2 - Unauthenticated Full Path Disclosure
Slug
wp-portfolio-gallery
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
wp-post-author
Published
2024-05-06
Title
WP Post Author < 3.6.5 - Subscriber+ Rating Manipulation
Slug
wp-post-author
Published
2024-05-06
Title
WP Post Author < 3.7.5 - Missing Authorization
Slug
wp-post-author
Published
2024-06-20
Title
WP Post Author < 3.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-post-author
Published
2024-10-11
Title
Boost Your Blog's Engagement with WP Post Author < 3.8.2 - Authenticated (Administrator+) SQL Injection
Slug
wp-post-author
Published
2024-12-30
Title
WP Post Author < 3.8.3 - Authenticated (Administrator+) SQL Injection
Slug
wp-post-block
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-post-category-notifications
Published
2025-01-16
Title
WP Post Category Notifications <= 1.0 - Reflected Cross-Site Scripting
Slug
wp-post-columns
Published
2023-10-22
Title
WP Post Columns <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-post-corrector
Published
2025-01-14
Title
WP Post Corrector <= 1.0.2 - Reflected Cross-Site Scripting
Slug
wp-post-corrector
Published
2025-06-05
Title
WP Post Corrector <= 1.0.2 - Authenticated (Administrator+) SQL Injection
Slug
wp-post-disclaimer
Published
2024-03-25
Title
WP Post Disclaimer < 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-post-hide
Published
2025-07-16
Title
WP Post Hide < 1.1.0 - Cross-Site Request Forgery
Slug
wp-post-list-table
Published
2025-01-29
Title
WP Post List Table < 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-post-modal
Published
2023-10-27
Title
WP Post Popup <= 3.7.3 - Admin+ Stored XSS
Slug
wp-post-modules-el
Published
2025-05-20
Title
WP Post Modules for Elementor <= 2.5.0 - Reflected Cross-Site Scripting
Slug
wp-post-page-clone
Published
2020-04-25
Title
Duplicate Page and Post < 2.5.7 & WP Post Page Clone < 1.1 - SQL Injections due to Duplicated Snippets
Slug
wp-post-page-clone
Published
2021-12-27
Title
WP Post Page Clone < 1.2 - Unauthorised Post Access
Slug
wp-post-signature
Published
2025-12-31
Title
Post Signature <= 0.4.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
wp-post-styling
Published
2022-05-31
Title
WP Post Styling < 1.3.1 - Multiple CSRF