WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wpbits-addons-for-elementor
Published
2024-07-08
Title
WPBITS Addons For Elementor Page Builder < 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
wpbits-addons-for-elementor
Published
2024-12-03
Title
WPBITS Addons For Elementor Page Builder < 1.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
wpbits-addons-for-elementor
Published
2025-01-03
Title
WPBITS Addons For Elementor Page Builder < 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpbits-addons-for-elementor
Published
2025-01-06
Title
WPBITS Addons For Elementor Page Builder < 1.6 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
wpbits-addons-for-elementor
Published
2026-01-27
Title
WPBITS Addons For Elementor < 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wpblast
Published
2025-09-09
Title
WP Blast | SEO & Performance Booster < 1.8.7 - Cross-Site Request Forgery to Cache Clearing
Slug
wpblogsync
Published
2026-01-13
Title
WPBlogSyn <= 1.0 - Cross-Site Request Forgery to Arbitrary Remote Sync Configuration Update
Slug
wpbook
Published
2015-02-11
Title
WPBook <= 3.7 - Cross-Site Request Forgery (CSRF)
Slug
wpbookit
Published
2024-12-11
Title
WPBookit <= 1.6.0 - Unauthenticated SQL Injection
Slug
wpbookit
Published
2025-01-09
Title
WPBookit < 1.6.6 - Unauthenticated Arbitrary User Password Change
Slug
wpbookit
Published
2025-01-24
Title
WPBookit < 1.6.10 - Unauthenticated Arbitrary File Upload
Slug
wpbookit
Published
2025-03-09
Title
WPBookit < 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wpbookit
Published
2025-04-04
Title
WPBookit < 1.0.8 - Missing Authorization
Slug
wpbookit
Published
2025-05-08
Title
WPBookit < 1.0.3 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover
Slug
wpbookit
Published
2025-05-08
Title
WPBookit < 1.0.3 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update
Slug
wpbookit
Published
2025-07-11
Title
WPBookit < 1.0.5 - Unauthenticated Arbitrary File Upload
Slug
wpbookit
Published
2025-07-11
Title
WPBookit < 1.0.5 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
wpbookit
Published
2025-07-23
Title
WPBookit < 1.0.7 - Unauthenticated Arbitrary File Upload via image_upload_handle Function
Slug
wpbookit
Published
2025-11-20
Title
WPBookit < 1.0.7 - Unauthenticated Stored Cross-Site Scripting
Slug
wpbookit
Published
2025-12-12
Title
WPBookit <= 1.0.7 - Customer Deletion via CSRF
Slug
wpbot-pro
Published
2025-01-21
Title
WPBot Pro Wordpress Chatbot < 13.5.6 - Unauthenticated Arbitrary File Upload
Slug
wpbot-pro
Published
2025-01-21
Title
WPBot Pro Wordpress Chatbot < 13.5.6 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response Creation
Slug
wpbot-pro
Published
2025-05-16
Title
WPBot Pro Wordpress Chatbot < 13.7.0 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
wpbot-pro
Published
2025-05-14
Title
WPBot Pro Wordpress Chatbot <= 12.7.0 - Unauthenticated PHP Object Injection
Slug
wpbricks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius