WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-wc-affiliate-program
Published
2024-09-30
Title
WordPress & WooCommerce Affiliate Program < 8.5.0 - Authentication Bypass to Account Takeover and Privilege Escalation
Slug
wp-webauthn
Published
2024-09-27
Title
WP-WebAuthn < 1.3.4 - Contributor+ Stored XSS via wwa_login_form Shortcode
Slug
wp-webauthn
Published
2024-09-30
Title
WP-WebAuthn < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-webcam-widget-shortcode
Published
2025-10-10
Title
WordPress Live Webcam Widget & Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-webhooks
Published
2025-08-20
Title
WP Webhooks < 3.3.6 - Unauthenticated Arbitrary File Copy
Slug
wp-webhooks
Published
2025-11-26
Title
Webhooks < 3.3.9 - Authenticated (Administrator+) PHP Object Injection
Slug
wp-webhooks
Published
2025-12-12
Title
Webhooks < 3.3.9 - Unauthenticated Arbitrary File Upload
Slug
wp-webinarsystem
Published
2024-04-05
Title
WebinarPress < 1.33.10 - Reflected Cross-Site Scripting
Slug
wp-webinarsystem
Published
2024-05-09
Title
WebinarPress < 1.33.21 - Cross-Site Request Forgery
Slug
wp-webinarsystem
Published
2024-08-16
Title
WebinarPress < 1.33.21 - Cross-Site Request Forgery
Slug
wp-webinarsystem
Published
2025-01-07
Title
WordPress Webinar Plugin – WebinarPress < 1.33.25 - Missing Authorization to Authenticated (Subscriber+) Webinar Updates
Slug
wp-webinarsystem
Published
2025-01-07
Title
WordPress Webinar Plugin – WebinarPress < 1.33.25 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation
Slug
wp-webinarsystem
Published
2025-04-01
Title
WebinarPress <= 1.33.27 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-webinarsystem
Published
2025-04-01
Title
WebinarPress <= 1.33.27 - Missing Authorization
Slug
wp-webinarsystem
Published
2025-04-09
Title
WebinarPress <= 1.33.27 - Open Redirect
Slug
wp-webinarsystem
Published
2025-05-07
Title
WebinarPress <= 1.33.27 - Authenticated (Administrator+) Server-Side Request Forgery
Slug
wp-webinarsystem
Published
2025-10-19
Title
WebinarPress <= 1.33.28 - Missing Authorization
Slug
wp-website-creator
Published
2024-11-08
Title
Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-weixin-robot
Published
2024-12-12
Title
WP微信机器人 <= 5.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-whatsapp
Published
2023-12-26
Title
WP Chat App < 3.4.5 - Admin+ Stored XSS
Slug
wp-whatsapp
Published
2024-03-06
Title
WP Chat App < 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
Slug
wp-whatsapp
Published
2024-03-29
Title
WP Chat App < 3.6.3 - Contributor+ Stored XSS
Slug
wp-whatsapp
Published
2024-04-05
Title
WP Chat App < 3.6.4 - Admin+ Stored XSS
Slug
wp-whatsapp
Published
2024-06-06
Title
WP Chat App < 3.6.5 - Admin+ Stored XSS
Slug
wp-whatsapp
Published
2024-11-15
Title
WP Chat App < 3.6.9 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation