WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-prayer
Published
2024-04-24
Title
WP Prayer <= 2.0.9 - Email Settings Update via CSRF
Slug
wp-prayers-request
Published
2024-05-24
Title
WP Prayer II < 2.4.8 - Settings Update via CSRF
Slug
wp-prayers-request
Published
2024-05-24
Title
WP Prayer II < 2.4.8 - Email Settings Update via CSRF
Slug
wp-predict
Published
2014-08-01
Title
WP-Predict 1.0 - Blind SQL Injection
Slug
wp-pricing-table
Published
2025-02-04
Title
WP Pricing Table <= 1.1 - Reflected XSS
Slug
wp-print
Published
2014-08-01
Title
WP-Print 2.51 - Setting Manipulation CSRF
Slug
wp-print-friendly
Published
2014-08-01
Title
WP Print Friendly 3.3.7 - wp-admin/options.php printfriendly_option custom_image Parameter XSS
Slug
wp-print-friendly
Published
2014-08-01
Title
WP Print Friendly <= 0.5.2 - Security Bypass
Slug
wp-private-content-plus
Published
2019-08-27
Title
WP Private Content Plus < 2.0 - Unauthenticated Options Change
Slug
wp-private-content-plus
Published
2021-02-22
Title
WP Content Plus < 3.2 - CSRF Nonce Bypass
Slug
wp-private-content-plus
Published
2021-03-01
Title
WP Private Content Plus < 3.2 - Cross-Site Request Forgery
Slug
wp-private-content-plus
Published
2024-02-27
Title
WP Private Content Plus < 3.6.1 - Unauthenticated Protected Post Access
Slug
wp-private-content-plus
Published
2024-12-05
Title
WP Private Content Plus < 3.6.2 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
wp-private-content-plus
Published
2025-08-11
Title
WP Private Content Plus <= 3.6.2 - Unauthenticated Sensitive Information Exposure
Slug
wp-private-content-plus
Published
2025-09-19
Title
WP Private Content Plus <= 3.6.2 - Password Protection Bypass
Slug
wp-private-media
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-private-media
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-private-media
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-private-message
Published
2023-01-30
Title
WP Private Message < 1.0.6 - Private Message Disclosure via IDOR
Slug
wp-private-messages
Published
2014-08-01
Title
wp-private-messages - /wp-admin/profile.php msgid Parameter SQL Injection
Slug
wp-private-messages
Published
2016-12-12
Title
WP Private Messages 1.0.1 – Authenticated SQL Injection
Slug
wp-pro-counter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-pro-counter
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-pro-quiz
Published
2020-06-22
Title
WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via CSRF
Slug
wp-product-feed-manager
Published
2024-03-16
Title
WooCommerce Google Feed Manager < 2.3.0 - Authenticated (Shop manager+) Stored Cross-Site Scripting