WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
webinar_plugin
Published
2014-08-01
Title
Easy Webinar - get_widget.php wid Parameter SQL Injection
Slug
weblibrarian
Published
2019-07-16
Title
Web Librarian < 3.5.5 - SQL Injection
Slug
weblibrarian
Published
2017-07-20
Title
Weblibrarian < 3.4.8.5 - XSS
Slug
weblibrarian
Published
2017-07-25
Title
Weblibrarian < 3.4.8.6 - XSS
Slug
weblibrarian
Published
2017-07-25
Title
Weblibrarian < 3.4.8.7 - XSS
Slug
weblibrarian
Published
2023-08-14
Title
WebLibrarian <= 3.5.8.4 - Reflected XSS
Slug
webling
Published
2025-04-01
Title
Webling <= 3.9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
weblizar-companion
Published
2025-06-27
Title
IS-theme-companion <= 1.58 - Cross-Site Request Forgery
Slug
weblizar-pinterest-feeds
Published
2018-01-12
Title
Pinterest Feed <= 1.1.1 - Authenticated XSS & CSRF
Slug
webman-amplifier
Published
2025-12-31
Title
WebMan Amplifier <= 1.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
webmaster-tools
Published
2023-10-17
Title
Webmaster Tools <= 2.0 - Admin+ Stored XSS
Slug
webmaster-tools
Published
2023-10-17
Title
Webmaster Tools <= 2.0 - Settings Update to Stored XSS via CSRF
Slug
webmaster-tools-verification
Published
2022-10-19
Title
Webmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin Deactivation
Slug
webo-facto-connector
Published
2024-09-17
Title
Webo-facto < 1.41 - Unauthenticated Privilege Escalation
Slug
webp-converter-for-media
Published
2019-06-27
Title
WebP Converter for Media <= 1.0.2 - Cross-Site Request Forgery (CSRF)
Slug
webp-converter-for-media
Published
2021-12-27
Title
WebP Converter for Media < 4.0.3 - Unauthenticated Open redirect
Slug
webp-converter-for-media
Published
2025-12-16
Title
Converter for Media < 6.4.0 - Subscriber+ Optimized Image Deletion via regenerate-attachment REST Endpoint
Slug
webp-express
Published
2019-06-16
Title
WebP Express <= 0.14.10 - Multiple Issues
Slug
webp-express
Published
2019-06-26
Title
WebP Express < 0.14.8 - Authenticated Stored XSS
Slug
webp-express
Published
2025-12-03
Title
WebP Express < 0.25.11 - Unauthenticated Information Exposure
Slug
webp-svg-support
Published
2024-06-05
Title
WebP & SVG Support <= 1.4.0 - Author+ Stored XSS via SVG
Slug
webparex
Published
2025-02-21
Title
Shipmozo Courier Tracking <= 1.0 - Reflected Cross-Site Scripting
Slug
webpushr-web-push-notifications
Published
2023-11-06
Title
Webpushr < 4.35.0 - Unauthenticated Stored XSS
Slug
webpushr-web-push-notifications
Published
2023-10-19
Title
Webpushr < 4.35.0 - LFI via CSRF
Slug
webpushr-web-push-notifications
Published
2024-05-03
Title
Webpushr < 4.36.0 - Reflected Cross-Site Scripting