WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-search-keyword-redirect
Published
2024-04-11
Title
Search Keyword Redirect <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-secure-by-sitesecuritymonitorcom
Published
2025-04-10
Title
wp secure <= 1.2 - Reflected Cross-Site Scripting
Slug
wp-secure-maintainance
Published
2024-06-21
Title
WP Secure Maintenance < 1.7 - Admin+ Stored XSS
Slug
wp-security-audit-log
Published
2016-06-27
Title
WP Security Audit Log 1.5-2.4.3 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
wp-security-audit-log
Published
2018-03-28
Title
WP Security Audit Log Plugin <= 3.1.1 - Sensitive Information Disclosure
Slug
wp-security-audit-log
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
wp-security-audit-log
Published
2020-03-08
Title
WP Security Audit Log < 4.0.2 - Broken Access Control in First-Time Install Wizard
Slug
wp-security-audit-log
Published
2020-11-02
Title
WP Activity Log < 4.1.5 - SQL Injection in External Database Module
Slug
wp-security-audit-log
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-security-audit-log
Published
2023-05-17
Title
WP Activity Log < 4.5.2 - Subscriber+ Information Leak
Slug
wp-security-audit-log
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-security-audit-log
Published
2024-02-14
Title
WP Activity Log < 4.6.2 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-security-audit-log
Published
2024-11-14
Title
WP Activity Log < 5.2.2 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter
Slug
wp-security-audit-log
Published
2025-02-12
Title
WP Activity Log < 5.3.0 - Unauthenticated Stored XSS
Slug
wp-security-audit-log
Published
2025-02-27
Title
WP Activity Log < 5.3.3 - Authenticated (Admin+) PHP Object Injection
Slug
wp-security-audit-log
Published
2026-02-14
Title
Activity Log < 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-security-audit-log
Published
2026-05-19
Title
WP Activity Log < 5.6.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-security-audit-log
Published
2026-06-19
Title
WP Activity Log < 5.6.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
wp-security-audit-log
Published
2026-06-16
Title
WP Activity Log < 5.6.4 - Unauthenticated PHP Object Injection
Slug
wp-security-audit-log
Published
2026-07-23
Title
WP Activity Log < 5.6.5 - Cross-Site Request Forgery
Slug
wp-security-audit-log-premium
Published
2024-04-09
Title
WP Activity Log Premium < 4.6.4.1 - Authenticated (Subscriber+) SQL Injection
Slug
wp-security-hardening
Published
2021-06-07
Title
WP Hardening < 1.2.2 - Reflected XSS via URI
Slug
wp-security-hardening
Published
2021-06-07
Title
WP Hardening < 1.2.2 - Reflected XSS via historyvalue
Slug
wp-security-hardening
Published
2024-09-17
Title
WP Hardening – Fix Your WordPress Security < 1.2.7 - Unauthenticated Security Feature Bypass to Username Enumeration
Slug
wp-security-master
Published
2025-06-05
Title
WP Security Master <= 1.0.2 - Cross-Site Request Forgery