WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-prayer
Published
2021-05-17
Title
WP Prayer < 1.6.2 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
wp-prayer
Published
2021-06-08
Title
WP Prayer < 1.6.7 - Arbitrary Plugin Settings Update via CSRF
Slug
wp-prayer
Published
2023-02-14
Title
WP Prayer < 1.9.7 - Admin+ Stored XSS
Slug
wp-prayer
Published
2021-06-08
Title
WP Prayer < 1.6.6 - Cross-Site Request Forgery
Slug
wp-prayer
Published
2024-04-24
Title
WP Prayer <= 2.0.9 - Arbitrary Prayer Deletion via CSRF
Slug
wp-prayer
Published
2024-04-24
Title
WP Prayer <= 2.0.9 - Settings Update via CSRF
Slug
wp-prayer
Published
2024-04-24
Title
WP Prayer <= 2.0.9 - Email Settings Update via CSRF
Slug
wp-prayers-request
Published
2024-05-24
Title
WP Prayer II < 2.4.8 - Settings Update via CSRF
Slug
wp-prayers-request
Published
2024-05-24
Title
WP Prayer II < 2.4.8 - Email Settings Update via CSRF
Slug
wp-predict
Published
2014-08-01
Title
WP-Predict 1.0 - Blind SQL Injection
Slug
wp-pricing-table
Published
2025-02-04
Title
WP Pricing Table <= 1.1 - Reflected XSS
Slug
wp-print
Published
2014-08-01
Title
WP-Print 2.51 - Setting Manipulation CSRF
Slug
wp-print-friendly
Published
2014-08-01
Title
WP Print Friendly 3.3.7 - wp-admin/options.php printfriendly_option custom_image Parameter XSS
Slug
wp-print-friendly
Published
2014-08-01
Title
WP Print Friendly <= 0.5.2 - Security Bypass
Slug
wp-private-content-plus
Published
2019-08-27
Title
WP Private Content Plus < 2.0 - Unauthenticated Options Change
Slug
wp-private-content-plus
Published
2021-02-22
Title
WP Content Plus < 3.2 - CSRF Nonce Bypass
Slug
wp-private-content-plus
Published
2021-03-01
Title
WP Private Content Plus < 3.2 - Cross-Site Request Forgery
Slug
wp-private-content-plus
Published
2024-02-27
Title
WP Private Content Plus < 3.6.1 - Unauthenticated Protected Post Access
Slug
wp-private-content-plus
Published
2024-12-05
Title
WP Private Content Plus < 3.6.2 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
wp-private-content-plus
Published
2025-08-11
Title
WP Private Content Plus <= 3.6.2 - Unauthenticated Sensitive Information Exposure
Slug
wp-private-content-plus
Published
2025-09-19
Title
WP Private Content Plus <= 3.6.2 - Password Protection Bypass
Slug
wp-private-media
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-private-media
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-private-media
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-private-message
Published
2023-01-30
Title
WP Private Message < 1.0.6 - Private Message Disclosure via IDOR