WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp_roknewspager
Published
2014-08-01
Title
RokNewsPager <= 1.17 - XSS,DoS,Disclosure,Upload Vulnerabilities
Slug
wp_rokstories
Published
2014-08-01
Title
RokStories <= 1.25 - XSS,DoS,Disclosure,Upload Vulnerabilities
Slug
wp_scraper
Published
2025-12-31
Title
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Server-Side Request Forgery
Slug
wp_visitorstracker
Published
2024-06-06
Title
WP Visitors Tracker < 2.4 - Reflected Cross-Site Scripting
Slug
wpa-seo-auto-linker
Published
2025-09-05
Title
SEO Auto Linker <= 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wpachievements-free
Published
2025-01-03
Title
WPAchievements Free <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadcenter
Published
2024-09-05
Title
WP AdCenter – Ad Manager & Adsense Ads < 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_alignment Attribute
Slug
wpadcenter
Published
2024-11-14
Title
WP AdCenter – Ad Manager & Adsense Ads < 2.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpadcenter_ad Shortcode
Slug
wpadcenter
Published
2025-04-01
Title
WP AdCenter < 2.5.9 - Contributor+ Stored XSS
Slug
wpadcenter
Published
2025-06-27
Title
WP AdCenter < 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadcenter
Published
2025-10-22
Title
WP AdCenter <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadverts
Published
2024-06-21
Title
WPAdverts – Classifieds Plugin < 2.1.3 - Cross-Site Request Forgery
Slug
wpadverts
Published
2024-10-29
Title
WPAdverts – Classifieds Plugin < 2.1.7 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode
Slug
wpadverts
Published
2024-11-20
Title
WPAdverts – Classifieds Plugin < 2.1.8 - Reflected Cross-Site Scripting
Slug
wpadverts
Published
2025-04-16
Title
WPAdverts < 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadverts
Published
2025-05-07
Title
WPAdverts < 2.2.3 - Authenticated (Contributor+) Local File Inclusion
Slug
wpadverts
Published
2025-05-19
Title
WPAdverts < 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadverts
Published
2025-06-12
Title
WPAdverts < 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadverts
Published
2025-07-16
Title
WPAdverts < 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpadverts
Published
2026-01-07
Title
WPAdverts – Classifieds Plugin <= 2.2.11 - Missing Authorization
Slug
wpagecontact
Published
2021-08-22
Title
WordPress Page Contact <= 1.0 - Authenticated (editor+) SQL Injection
Slug
wpantiddos
Published
2025-03-02
Title
WP AntiDDOS <= 2.0 - Reflected Cross-Site Scripting
Slug
wpappninja
Published
2023-01-20
Title
WPMobile.App < 11.14 - Contributor+ Stored XSS
Slug
wpappninja
Published
2023-02-23
Title
WPMobile.App < 11.19 - Admin+ Stored XSS
Slug
wpappninja
Published
2023-03-30
Title
WPMobile.App < 11.21 - Admin+ Stored XSS