WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp2syslog
Published
2023-02-21
Title
wp2syslog <= 1.0.5 - Admin+ Stored XSS
Slug
wp2wb
Published
2025-03-24
Title
WordPres 同步微博 <= 1.1.0 - Cross-Site Request Forgery
Slug
wp3d-model-import-block
Published
2025-12-12
Title
WP3D Model Import Viewer <= 1.0.7 - Authenticated (Contributor+) Arbitrary File Upload
Slug
wpSS
Published
2014-08-01
Title
Spreadsheet <= 0.6 - SQL Injection
Slug
wpSS
Published
2014-08-06
Title
wpSS <= 0.62 - SQL Injection & XSS
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox - Multiple Vulnerabilities
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - thumb.php src Parameter Malformed Input Path Disclosure
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - thumb.php src Parameter XSS
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - rokbox.php Direct Request Path Disclosure
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - error_log Direct Request Error Log Information Disclosure
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - jwplayer/jwplayer.swf abouttext Parameter XSS
Slug
wp_rokbox
Published
2014-08-01
Title
RokBox <= 2.13 - thumb.php src Parameter Arbitrary File Upload
Slug
wp_rokintroscroller
Published
2014-08-01
Title
RokIntroScroller <= 1.8 - XSS,DoS,Disclosure,Upload Vulnerabilities
Slug
wp_rokmicronews
Published
2014-08-01
Title
RokMicroNews <= 1.5 - XSS,DoS,Disclosure,Upload Vulnerabilities
Slug
wp_roknewspager
Published
2014-08-01
Title
RokNewsPager <= 1.17 - XSS,DoS,Disclosure,Upload Vulnerabilities
Slug
wp_rokstories
Published
2014-08-01
Title
RokStories <= 1.25 - XSS,DoS,Disclosure,Upload Vulnerabilities
Slug
wp_scraper
Published
2025-12-31
Title
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Server-Side Request Forgery
Slug
wp_visitorstracker
Published
2024-06-06
Title
WP Visitors Tracker < 2.4 - Reflected Cross-Site Scripting
Slug
wpa-seo-auto-linker
Published
2025-09-05
Title
SEO Auto Linker <= 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wpachievements-free
Published
2025-01-03
Title
WPAchievements Free <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadcenter
Published
2024-09-05
Title
WP AdCenter – Ad Manager & Adsense Ads < 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_alignment Attribute
Slug
wpadcenter
Published
2024-11-14
Title
WP AdCenter – Ad Manager & Adsense Ads < 2.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpadcenter_ad Shortcode
Slug
wpadcenter
Published
2025-04-01
Title
WP AdCenter < 2.5.9 - Contributor+ Stored XSS
Slug
wpadcenter
Published
2025-06-27
Title
WP AdCenter < 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadcenter
Published
2025-10-22
Title
WP AdCenter <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting