WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wpadverts
Published
2024-06-21
Title
WPAdverts – Classifieds Plugin < 2.1.3 - Cross-Site Request Forgery
Slug
wpadverts
Published
2024-10-29
Title
WPAdverts – Classifieds Plugin < 2.1.7 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode
Slug
wpadverts
Published
2024-11-20
Title
WPAdverts – Classifieds Plugin < 2.1.8 - Reflected Cross-Site Scripting
Slug
wpadverts
Published
2025-04-16
Title
WPAdverts < 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadverts
Published
2025-05-07
Title
WPAdverts < 2.2.3 - Authenticated (Contributor+) Local File Inclusion
Slug
wpadverts
Published
2025-05-19
Title
WPAdverts < 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadverts
Published
2025-06-12
Title
WPAdverts < 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadverts
Published
2025-07-16
Title
WPAdverts < 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpagecontact
Published
2021-08-22
Title
WordPress Page Contact <= 1.0 - Authenticated (editor+) SQL Injection
Slug
wpantiddos
Published
2025-03-02
Title
WP AntiDDOS <= 2.0 - Reflected Cross-Site Scripting
Slug
wpappninja
Published
2023-01-20
Title
WPMobile.App < 11.14 - Contributor+ Stored XSS
Slug
wpappninja
Published
2023-02-23
Title
WPMobile.App < 11.19 - Admin+ Stored XSS
Slug
wpappninja
Published
2023-03-30
Title
WPMobile.App < 11.21 - Admin+ Stored XSS
Slug
wpappninja
Published
2024-06-06
Title
WPMobile.App — Android and iOS Mobile Application < 11.42 - Reflected Cross-Site Scripting
Slug
wpappninja
Published
2024-08-26
Title
WPMobile.App < 11.49 - Reflected Cross-Site Scripting
Slug
wpappninja
Published
2024-09-30
Title
WPMobile.App < 11.51 - Reflected Cross-Site Scripting
Slug
wpappninja
Published
2024-12-12
Title
WPMobile.App — Android and iOS Mobile Application < 11.53 - Unauthenticated Arbitrary Shortcode Execution
Slug
wpappninja
Published
2025-02-19
Title
WPMobile.App < 11.57 - Open Redirect via 'redirect' Parameter
Slug
wpappninja
Published
2025-10-26
Title
WPMobile.App < 11.72 - Unauthenticated Stored Cross-Site Scripting
Slug
wpaudio-mp3-player
Published
2023-02-13
Title
WPaudio MP3 Player <= 4.0.2 - Contributor+ Stored XSS
Slug
wpavatar
Published
2025-08-25
Title
WPAvatar <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpb-advanced-faq
Published
2023-02-22
Title
WPB Advanced FAQ <= 1.0.6 - Contributor+ Stored XSS
Slug
wpb-elementor-addons
Published
2024-05-17
Title
WPB Elementor Addons < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpb-elementor-addons
Published
2024-05-21
Title
WPB Elementor Addons < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
Slug
wpb-elementor-addons
Published
2024-05-29
Title
WPB Elementor Addons < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting