WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-popups-lite
Published
2024-03-15
Title
WP Popups < 2.1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-popups-lite
Published
2024-07-11
Title
WP Popups – WordPress Popup builder < 2.2.0.2 - Unauthenticated Full Path Disclosure
Slug
wp-popups-lite
Published
2026-01-11
Title
WP Popups < 2.2.0.6 - Missing Authorization
Slug
wp-portfolio-gallery
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
wp-post-author
Published
2024-05-06
Title
WP Post Author < 3.6.5 - Subscriber+ Rating Manipulation
Slug
wp-post-author
Published
2024-05-06
Title
WP Post Author < 3.7.5 - Missing Authorization
Slug
wp-post-author
Published
2024-06-20
Title
WP Post Author < 3.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-post-author
Published
2024-10-11
Title
Boost Your Blog's Engagement with WP Post Author < 3.8.2 - Authenticated (Administrator+) SQL Injection
Slug
wp-post-author
Published
2024-12-30
Title
WP Post Author < 3.8.3 - Authenticated (Administrator+) SQL Injection
Slug
wp-post-author
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
wp-post-author
Published
2026-06-26
Title
WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars < 3.10.0 - Authenticated (Contributor+) SQL Injection
Slug
wp-post-author
Published
2026-08-04
Title
WP Post Author < 3.10.0 - Authenticated (Author+) SQL Injection
Slug
wp-post-author
Published
2026-10-09
Title
WP Post Author < 4.1.0 - Authenticated (Admin+) SQL Injection
Slug
wp-post-author
Published
2026-10-09
Title
WP Post Author 4.0.0 - Authenticated (Contributor+) SQL Injection
Slug
wp-post-author
Published
2026-10-07
Title
WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars < 4.0.1 - Authenticated (Administrator+) SQL Injection
Slug
wp-post-author
Published
2026-10-27
Title
WP Post Author < 4.2.0 - Unauthenticated Modification of the First User Account's Profile Fields
Slug
wp-post-author
Published
2026-10-27
Title
WP Post Author < 4.2.0 - Unauthenticated reCAPTCHA Secret Key Disclosure
Slug
wp-post-block
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-post-category-notifications
Published
2025-01-16
Title
WP Post Category Notifications <= 1.0 - Reflected Cross-Site Scripting
Slug
wp-post-columns
Published
2023-10-22
Title
WP Post Columns <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-post-corrector
Published
2025-01-14
Title
WP Post Corrector <= 1.0.2 - Reflected Cross-Site Scripting
Slug
wp-post-corrector
Published
2025-06-05
Title
WP Post Corrector <= 1.0.2 - Authenticated (Administrator+) SQL Injection
Slug
wp-post-disclaimer
Published
2024-03-25
Title
WP Post Disclaimer < 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-post-hide
Published
2025-07-16
Title
WP Post Hide < 1.1.0 - Cross-Site Request Forgery
Slug
wp-post-list-table
Published
2025-01-29
Title
WP Post List Table < 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting