WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-timelines
Published
2024-09-25
Title
WP Timeline – Vertical and Horizontal timeline plugin < 3.6.8 - Reflected Cross-Site Scripting
Slug
wp-timelines
Published
2024-09-25
Title
WP Timeline – Vertical and Horizontal timeline plugin < 3.6.8 - Unauthenticated Local File Inclusion
Slug
wp-timelines
Published
2024-09-25
Title
WP Timeline – Vertical and Horizontal timeline plugin < 3.6.8 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-tithely
Published
2024-11-25
Title
Tithe.ly Giving Button <= 1.1 - Contributor+ Stored XSS via Shortcode
Slug
wp-tmkm-amazon
Published
2014-06-12
Title
WP Tmkm Amazon < 1.5.3 - XSS
Slug
wp-to-buffer
Published
2021-09-20
Title
WordPress to Hootsuite (< 1.3.9) & Buffer (< 3.7.5) - Reflected Cross-Site Scripting
Slug
wp-to-hootsuite
Published
2021-09-20
Title
WordPress to Hootsuite (< 1.3.9) & Buffer (< 3.7.5) - Reflected Cross-Site Scripting
Slug
wp-to-hootsuite
Published
2025-04-04
Title
Post to Social Media – WordPress to Hootsuite < 1.6.0 - Cross-Site Request Forgery
Slug
wp-to-twitter
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-to-twitter
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-todo
Published
2024-01-17
Title
WP To Do < 1.2.9 - Contributor+ Stored XSS
Slug
wp-todo
Published
2024-05-29
Title
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment
Slug
wp-todo
Published
2024-05-29
Title
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()
Slug
wp-todo
Published
2024-05-29
Title
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings
Slug
wp-todo
Published
2024-05-29
Title
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings
Slug
wp-todo
Published
2024-07-06
Title
WP To Do <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-todo
Published
2024-08-28
Title
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments
Slug
wp-tools-divi-blog-carousel
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-tools-divi-blog-carousel
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-tools-divi-product-carousel
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-tools-divi-product-carousel
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-tools-gravity-forms-divi-module
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-tools-gravity-forms-divi-module
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-tooltip
Published
2025-04-24
Title
Tooltip <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-top-news
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius