WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-security-audit-log
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-security-audit-log
Published
2024-02-14
Title
WP Activity Log < 4.6.2 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-security-audit-log
Published
2024-11-14
Title
WP Activity Log < 5.2.2 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter
Slug
wp-security-audit-log
Published
2025-02-12
Title
WP Activity Log < 5.3.0 - Unauthenticated Stored XSS
Slug
wp-security-audit-log
Published
2025-02-27
Title
WP Activity Log < 5.3.3 - Authenticated (Admin+) PHP Object Injection
Slug
wp-security-audit-log
Published
2026-02-14
Title
Activity Log < 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-security-audit-log-premium
Published
2024-04-09
Title
WP Activity Log Premium < 4.6.4.1 - Authenticated (Subscriber+) SQL Injection
Slug
wp-security-hardening
Published
2021-06-07
Title
WP Hardening < 1.2.2 - Reflected XSS via URI
Slug
wp-security-hardening
Published
2021-06-07
Title
WP Hardening < 1.2.2 - Reflected XSS via historyvalue
Slug
wp-security-hardening
Published
2024-09-17
Title
WP Hardening – Fix Your WordPress Security < 1.2.7 - Unauthenticated Security Feature Bypass to Username Enumeration
Slug
wp-security-master
Published
2025-06-05
Title
WP Security Master <= 1.0.2 - Cross-Site Request Forgery
Slug
wp-security-pro
Published
2022-06-06
Title
WordPress Security < 4.2.1 - Admin+ Stored Cross-Site Scripting
Slug
wp-security-questions
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
wp-security-questions
Published
2021-08-16
Title
WP Security Question <= 1.0.5 - Cross-Site Request Forgery
Slug
wp-security-scan
Published
2014-08-01
Title
Acunetix WP Security 4.0.3 - /wp-admin/admin.php wps-database Page Backup Generation CSRF Weakness
Slug
wp-sendfox
Published
2024-03-13
Title
WP SendFox < 1.3.1 - Missing Authorization
Slug
wp-sendfox
Published
2024-10-15
Title
WP SendFox <= 1.3.1 - Unauthenticated Information Disclosure
Slug
wp-sendgrid-mailer
Published
2024-08-26
Title
SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection
Slug
wp-sendgrid-mailer
Published
2024-10-17
Title
SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
Slug
wp-sendgrid-mailer
Published
2025-01-16
Title
SendGrid for WordPress <= 1.4 - Missing Authorization
Slug
wp-sendgrid-smtp
Published
2025-09-12
Title
Multiple Plugins and Themes by inkthemes - Unauthenticated Information Exposure
Slug
wp-sendsms
Published
2014-08-01
Title
WP-SendSMS - Setting Manipulation Cross-Site Request Forgery (CSRF)
Slug
wp-sendsms
Published
2014-08-01
Title
WP-SendSMS - Multiple Cross-Site Scripting (XSS)
Slug
wp-sentry
Published
2022-05-31
Title
WP Sentry <= 1.0 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
wp-seo-keyword-optimizer
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update