WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-team-manager
Published
2022-06-14
Title
WordPress Team Manager < 2.0.1 - Contributor+ Stored Cross-Site Scripting
Slug
wp-team-manager
Published
2024-07-11
Title
WordPress Team Manager < 2.1.13 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-team-manager
Published
2025-03-27
Title
Team Manager < 2.2.0 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-team-manager
Published
2025-09-22
Title
Team Manager <= 2.4.9 - Missing Authorization
Slug
wp-tell-a-friend-popup-form
Published
2023-09-04
Title
wp tell a friend popup form <= 7.1 - Admin+ Stored XSS
Slug
wp-tell-a-friend-popup-form
Published
2023-07-26
Title
WP Tell a Friend Popup Form <= 7.1 - Settings Update via CSRF
Slug
wp-terms-popup
Published
2023-01-23
Title
WP Terms Popup < 2.6.1 - Admin+ Stored XSS
Slug
wp-tesseract
Published
2025-09-26
Title
WP Tesseract <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-test-email
Published
2024-09-12
Title
WP Test Email < 1.1.8 - Reflected Cross-Site Scripting
Slug
wp-test-email
Published
2025-03-14
Title
WP Test Email < 1.1.9 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-testimonial-widget
Published
2024-08-20
Title
WP Testimonial Widget <= 3.1 - Missing Authorization
Slug
wp-testimonial-widget
Published
2024-08-26
Title
WP Testimonial Widget <= 3.1 - Authenticated (Admin+) SQL Injection
Slug
wp-testimonial-widget
Published
2024-08-26
Title
WP Testimonial Widget <= 3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-testimonials
Published
2017-06-02
Title
WP-Testimonials - Authenticated SQL Injection
Slug
wp-testing
Published
2022-04-26
Title
Psychological tests & quizzes <= 0.21.19 - Contributor+ Stored Cross-Site Scripting
Slug
wp-text-expander
Published
2025-06-05
Title
WP Text Expander <= 1.0.1 - Authenticated (Administrator+) SQL Injection
Slug
wp-text-slider-widget
Published
2025-12-25
Title
Text Slider Widget <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-thumb
Published
2025-06-19
Title
WPThumb <= 0.10 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
wp-thumbnail
Published
2025-10-21
Title
WP-Thumbnail <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-thumbtack-review-slider
Published
2025-08-27
Title
WP Thumbtack Review Slider < 2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-ticket
Published
2021-02-14
Title
Zebra_Form Library <= 2.9.8 - Reflected Cross-Site Scripting (XSS)
Slug
wp-ticket
Published
2021-09-20
Title
WP Ticket < 5.10.4 - Admin+ Stored Cross-Site Scripting
Slug
wp-ticket
Published
2025-08-25
Title
WP Ticket Customer Service Software & Support Ticket System < 6.0.3 - Unauthenticated PHP Object Injection
Slug
wp-ticket
Published
2025-09-26
Title
WP Ticket Customer Service Software & Support Ticket System < 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-ticket
Published
2025-09-23
Title
Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting