WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-user-switch
Published
2024-07-09
Title
WP User Switch <= 1.1.2 - Subscriber+ Privilege Escalation
Slug
wp-useronline
Published
2014-08-01
Title
Wp-UserOnline < 2.70 - Stored Cross-Site Scripting (XSS)
Slug
wp-useronline
Published
2022-07-19
Title
WP-UserOnline < 2.88.0 - Admin+ Stored Cross-Site Scripting
Slug
wp-useronline
Published
2022-08-22
Title
WP-UserOnline < 2.88.1 - Admin+ Stored Cross-Site Scripting
Slug
wp-useronline
Published
2023-11-06
Title
WP-UserOnline < 2.88.3 - Unauthenticated Stored XSS
Slug
wp-users-disable
Published
2022-09-14
Title
Disable User Login <= 1.0.2 - Unauthenticated Settings Update
Slug
wp-users-exporter
Published
2020-01-08
Title
WP Users Exporter <= 1.4.2 - CSV Injection
Slug
wp-users-masquerade
Published
2024-10-09
Title
WP Users Masquerade <= 2.0.0 - Authentication Bypass
Slug
wp-users-media
Published
2023-08-28
Title
WP Users Media <= 4.2.3 - Missing Authorization via wpusme_save_settings
Slug
wp-users-media
Published
2023-08-28
Title
WP Users Media <= 4.2.3 - Cross-Site Request Forgery in wpusme_save_settings
Slug
wp-vault
Published
2016-11-30
Title
WP Vault 0.8.6.6 - Unauthenticated Local File Inclusion (LFI)
Slug
wp-vertical-gallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-vertical-image-slider
Published
2015-09-20
Title
wordpress vertical image slider plugin < 1.2 - Cross-Site Scripting & CSRF
Slug
wp-vertical-image-slider
Published
2023-04-25
Title
WordPress Vertical Image Slider < 1.2.17 - Reflected Cross-Site Scripting
Slug
wp-vertical-image-slider
Published
2023-05-09
Title
Vertical Image Slider < 1.2.17 - Reflected XSS
Slug
wp-video-commando
Published
2014-09-27
Title
wp-video-comm&o Plugin - Cross-Site Scripting (XSS)
Slug
wp-video-gallery-free
Published
2022-04-13
Title
WP Video Gallery <= 1.7.1 - Unauthenticated SQLi
Slug
wp-video-lightbox
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
wp-video-lightbox
Published
2021-08-23
Title
WP Video Lightbox < 1.9.3 - Contributor+ Stored Cross-Site Scripting
Slug
wp-video-lightbox
Published
2022-07-04
Title
WP Video Lightbox < 1.9.5 - Reflected Cross-Site Scripting
Slug
wp-video-lightbox
Published
2022-07-04
Title
WP Video Lightbox < 1.9.6 - Admin+ Stored Cross-Site Scripting
Slug
wp-video-lightbox
Published
2022-12-21
Title
WP Video Lightbox < 1.9.7 - Contributor+ Stored XSS
Slug
wp-video-lightbox
Published
2024-05-01
Title
WP Video Lightbox < 1.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Slug
wp-video-lightbox
Published
2025-07-02
Title
prettyPhoto JavaScript Library <= 3.1.6 - Contributor+ Stored XSS
Slug
wp-video-playlist
Published
2025-04-02
Title
WP Video Playlist <= 1.1.2 - Missing Authorization to Unauthenticated Settings Update