WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-user-merger
Published
2022-11-07
Title
WP User Merger < 1.5.3 - Admin+ SQLi via wpsu_user_id
Slug
wp-user-profile-avatar
Published
2023-12-29
Title
WP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR
Slug
wp-user-profile-avatar
Published
2023-12-28
Title
WP User Profile Avatar < 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-user-profile-avatar
Published
2024-03-25
Title
WP User Profile Avatar < 1.0.2 - Contributor+ Stored XSS
Slug
wp-user-profile-avatar
Published
2025-01-15
Title
WP User Profile Avatar < 1.0.6 - Cross-Site Request Forgery to Settings Update
Slug
wp-user-profile-avatar
Published
2025-06-19
Title
WP User Profile Avatar <= 1.0.6 - Missing Authorization
Slug
wp-user-profiles
Published
2025-04-08
Title
WP User Profiles <= 2.6.2 - Authenticated (Subscriber+) Privilege Escalation
Slug
wp-user-stylesheet-switcher
Published
2025-06-19
Title
WP User Stylesheet Switcher <= v2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-user-switch
Published
2023-06-04
Title
WP User Switch < 1.0.3 - Subscriber+ Authentication Bypass
Slug
wp-user-switch
Published
2024-07-09
Title
WP User Switch <= 1.1.2 - Subscriber+ Privilege Escalation
Slug
wp-useronline
Published
2014-08-01
Title
Wp-UserOnline < 2.70 - Stored Cross-Site Scripting (XSS)
Slug
wp-useronline
Published
2022-07-19
Title
WP-UserOnline < 2.88.0 - Admin+ Stored Cross-Site Scripting
Slug
wp-useronline
Published
2022-08-22
Title
WP-UserOnline < 2.88.1 - Admin+ Stored Cross-Site Scripting
Slug
wp-useronline
Published
2023-11-06
Title
WP-UserOnline < 2.88.3 - Unauthenticated Stored XSS
Slug
wp-users-disable
Published
2022-09-14
Title
Disable User Login <= 1.0.2 - Unauthenticated Settings Update
Slug
wp-users-exporter
Published
2020-01-08
Title
WP Users Exporter <= 1.4.2 - CSV Injection
Slug
wp-users-masquerade
Published
2024-10-09
Title
WP Users Masquerade <= 2.0.0 - Authentication Bypass
Slug
wp-users-media
Published
2023-08-28
Title
WP Users Media <= 4.2.3 - Missing Authorization via wpusme_save_settings
Slug
wp-users-media
Published
2023-08-28
Title
WP Users Media <= 4.2.3 - Cross-Site Request Forgery in wpusme_save_settings
Slug
wp-vault
Published
2016-11-30
Title
WP Vault 0.8.6.6 - Unauthenticated Local File Inclusion (LFI)
Slug
wp-vertical-gallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-vertical-image-slider
Published
2015-09-20
Title
wordpress vertical image slider plugin < 1.2 - Cross-Site Scripting & CSRF
Slug
wp-vertical-image-slider
Published
2023-04-25
Title
WordPress Vertical Image Slider < 1.2.17 - Reflected Cross-Site Scripting
Slug
wp-vertical-image-slider
Published
2023-05-09
Title
Vertical Image Slider < 1.2.17 - Reflected XSS
Slug
wp-video-commando
Published
2014-09-27
Title
wp-video-comm&o Plugin - Cross-Site Scripting (XSS)