WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-private-messages
Published
2014-08-01
Title
wp-private-messages - /wp-admin/profile.php msgid Parameter SQL Injection
Slug
wp-private-messages
Published
2016-12-12
Title
WP Private Messages 1.0.1 – Authenticated SQL Injection
Slug
wp-pro-counter
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-pro-counter
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-pro-quiz
Published
2020-06-22
Title
WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via CSRF
Slug
wp-product-feed-manager
Published
2024-03-16
Title
WooCommerce Google Feed Manager < 2.3.0 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Slug
wp-product-feed-manager
Published
2024-04-15
Title
WooCommerce Google Feed Manager < 2.6.0 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
Slug
wp-product-feed-manager
Published
2024-08-22
Title
WooCommerce Google Feed Manager < 2.9.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Feed Actions
Slug
wp-product-gallery-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-product-review
Published
2020-05-14
Title
WP Product Review < 3.7.6 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
wp-profitshare
Published
2025-03-24
Title
WP Profitshare <= 1.4.9 - Authenticated (Editor+) SQL Injection
Slug
wp-profitshare
Published
2025-04-01
Title
WP Profitshare <= 1.4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-programmmanager
Published
2025-02-26
Title
WP Programmmanager <= 1.2 - Reflected XSS
Slug
wp-programmmanager
Published
2025-02-16
Title
WP-PManager <= 1.2 - Category Deletion via CSRF
Slug
wp-programmmanager
Published
2025-02-16
Title
WP-PManager <= 1.2 - Admin+ SQL Injection
Slug
wp-projects-portfolio
Published
2025-01-14
Title
WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected XSS
Slug
wp-projects-portfolio
Published
2025-01-14
Title
WP Projects Portfolio with Client Testimonials <= 3.0 - Stored XSS via CSRF
Slug
wp-propagator
Published
2024-10-25
Title
Plugin Propagator <= 0.1 - Unauthenticated Arbitrary File Upload
Slug
wp-property
Published
2014-08-01
Title
WP Property < 1.38.4 - Non-administrative User XMLI Remote Information Disclosure
Slug
wp-property
Published
2014-08-01
Title
WP Property <= 1.35.0 - Arbitrary File Upload
Slug
wp-proposals
Published
2025-04-01
Title
WP Proposals <= 2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-proposals
Published
2025-09-22
Title
WP Proposals <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-ptviewer
Published
2025-01-16
Title
WP PT-Viewer <= 2.0.2 - Reflected Cross-Site Scripting
Slug
wp-publication-archive
Published
2025-09-05
Title
WP Publication Archive <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-publications
Published
2021-09-09
Title
wp-publications - Local File Inclusion